ASA 5525X IPS setup in cluster

[carl_townshend]

Hi All

we have implemented 2 5525x ASA's running active/standby

do we have to manage the IPS Seperately or does it sync from the primary firewall ?

also do I need to licence the IPS devices seperately also ?

cheers

[Karsten Iwen]

The IPS is not included in the sync-process of the ASA. Both modules are "ships in the night" that don't know of each other. You also have to license them individually.

[adawa]

Hello, Carl. 

Karsten is correct, you need to license IPS on both of your ASA 5525-X. You can also check Cisco FirePower services for next generation IPS and malware protection. Do you already have the IPS license needed?

Let me know if you have other concerns or e-mail (adawa@cisco.com) me directly. Kind regards.