Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Best way to Install IPS modules in ASA's in Failover

We have a customer with a pair of ASA 5585-x in failover mode.  They are looking to install a pair of IPS modules in these ASA's.

Is there a way to install the IPS modules without any downtime.  I know for failover the ASA's have to have the same hardware, so if I install the IPS module in the standby unit it will break the failover between the ASA's.

What is the best way of doing this with as little downtime as possible.

I know I could bring down the standby ASA install the module, and then when it's booting up power down the primary ASA and then install the module into this ASA.  Is this the best way or is there a way to achieve this with zero downtime?

  • Intrusion Prevention Systems/IDS
New Member

Best way to Install IPS modules in ASA's in Failover

We did it recently for pairs of 5510 an 5520. Yes you have to bring both firewalls down for that. Failing over will not work as you mentioned will break failover.

You do not need downtime more than 2-3 mins for that.