AIP - SSM Module Move Between ASAs

[rchilcote]

I have a customer that has an ASA5510 with AIP-SSM-10 installed and they want to move this module to an ASA5520.  The ASA5510 with AIP is in production and has all the licensing installed.  My questions are...

1. Will I need to start from scratch on the AIP configuration or can I move the module to the ASA5520 without much hassle?

2. Will I need to change or purchase any licensing on either the ASA5520 or AIP module once it's moved?

3. Are there any other gotchas I should be aware of when doing this move?

Thanks in advance for your help.

[Julio Carvajal]

Hello,

1)

I would say yes as you will need to reset it to change all of the network settings so it can adapt to the new network IP configuration, etc.

2)

No, licensing affects directly the IPS module not the parent ASA.

3)

Make sure you are not running failover on any of the cases and if yes then

-if you remove the IPS failover will be removed as hardware do not mach

-for the new HA make sure both have IPS module (hardware not matching will turn off failover)

Looking for some Networking Assistance? 
Contact me directly at jcarvaja@laguiadelnetworking.com

I will fix your problem ASAP.

Cheers,

Julio Carvajal Segura
http://laguiadelnetworking.com

[bbiandov]

rchilcote keep us posted on how that move worked out; I am interested to hear any undocumented gotchas specifically killing the production ASA simply by REMOVING that module