Last night my firewall failover to secondary suddenly and I am still trying to find the root cause. Looking at the log and history, I saw the reason of failover because the "Service card in other unit has failed". Further investigating and the card is SSM according to Cisco web page. So I think it is the AIP-SSM card. Still do not know why the card was failed that trigger the failover. ASA running code 8.0.4. Right now the secondary is still the active ASA. We have the Netscaler in the DMZ doing web hosting. Could it be to much traffic for the ASA and/or AIP-SSM to handle? Anyone has any idea is appreciated.