I have a query regarding Cisco ASA Firewalls in failover mode . I want to insert two new AIP-SSM-20 cards inside that .Earlier there was no AIP-SSM modules inserted and the ASA was running smoothly in failover . Now when i will introduce the AIP-SSM modules , i want to ask the following :
a) Can we avoid network traffic flow hampering by putting the AIP-SSM modules one by one ?
b) Is it recommended to switch off one ASA at a time , insert the modules in them and do the same for the second ASA or can we insert both the AIP-SSM Modules simultaneously
c) During AIP-SSM module insertion , do i need to let the power cables be switched on while inserting it inside ASA backplane ?
According to me the ideal config would be to make the Primary firewall into standby mode (and secondary as Active) , insert the module ; configure the network settings of AIP SSM Module via ASDM .Now , as the Primary ASA is having its child node as AIP-SSM ready and the Secondary firewall not having it , what would be the result ? Will there be any kind of error considering that one ASA has a module and one doesnot .Also , Can i safely switch on the Primary and re-introduce it in the network as Standby so that i should proceed for the Secondary firewall activity ?