3. In an HA pair, the NGFW (CX module configured via PRSM) configurations do not automatically synchronize unless you use multi-device mode PRSM (licensed product on a separate VM). Otherwise you have to setup each module independently.
Regarding your question about failover for the NGFW - you do not have to use off-box PRSM. However, if you choose not to, then any changes you make on the primary unit via its on-box PRSM must also be made on the standby unit via its separate on-box PRSM. Admittedly that's a bit cumbersome but that's the way it is.
(The service policy on the base ASA that redirects traffic into the CX module is replicated.)
Please take a moment to rate responses and/or mark your question as answered.
This document explains the logic to develop Tidal Enterprise
Orchestrator workflow to automate the process of creating vCenter
Resource Pool* vSphere Power CLI must be installed either on the TEO
server or vCenter* vMA can also be used to achieve the same...
IntorductionCisco Process Orcehstrator (CPO) ships with the webservices
adapter that can be used to make Web Service API call to REST or SOAP
based applications. Before a sample workflow to make SOAP API calls
using CPO, lets understand some of the fundam...