hi all i would like to ask something abt the license. i have got 2 asa 5510 security plus license. so both of them are supporting failover. now i just want to test the aip-ssm module of the asa. can i buy one and put it on the asa and use it. i know it cannot work in failover configuration cause one will not be having the ips module.
so when i want to use the failover can i remove that ips module from the asa and will then it work.
I think it's possible, but with additional config to be done (with regards to enabling/disabling ssm). Configure both ASA with failover, and make sure it works first. Then, install one unit with SSM/IPS module which eventually will become your active firewall.
If you need to activate HA/redundancy between them, disabled/remove the ssm in active unit. Make sure the config is similar with the first failover mode you configured previously. Then, power-on or activate failover command in the standby unit.
BenefitsDocumentationPrerequisiteImage Download LinksLimitationsSupported PlatformsLicense RequirementsTopologyStep-By-Step ConfigurationConfigure Virtual ServiceActivate the virtual service and configure guest IPsConfiguring UTD (Service Plane)Configurin...
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...