Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Community will be in read-only mode on 12/14/2017 from 12:00 am pacific to 11:30 am.

During this time you will only be able to see content. Other interactions such as posting, replying to questions, or marking content as helpful will be disabled for few hours.

We apologize for the inconvenience while we perform important updates to the Community.

New Member

ips failover

hi all

i have recently designed a solution having  firewall failover in active standby mode .

now i need to add ips in inline mode. with failover capability .

1) is their any failover of ips 4210 ? further how many signatures does 4210 supports ..

2) is CSC card a substitue of IPS card on ASA ?

3 )Will CSC ---asa---4210ips --------inside network , slow down due to repeated scanning at various levels ??

thanks

1 ACCEPTED SOLUTION

Accepted Solutions
New Member

ips failover

I'll try to answer.

1) As I know there were no failover features in Cisco IPS.

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5729/ps5713/ps4077/white_paper_c11-459025.html

According to the document IPS has no additional influence on traffic in firewall failover situations but IPS cannot be clustered.

You can configure fail-open hardware bypass feature for IPS to permit traffic through it when IPS fails or use fail-close feature to stop traffic when IPS fails.

2) CSC is not 100% substitute for IPS.

3) It depends on your network.

1 REPLY
New Member

ips failover

I'll try to answer.

1) As I know there were no failover features in Cisco IPS.

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5729/ps5713/ps4077/white_paper_c11-459025.html

According to the document IPS has no additional influence on traffic in firewall failover situations but IPS cannot be clustered.

You can configure fail-open hardware bypass feature for IPS to permit traffic through it when IPS fails or use fail-close feature to stop traffic when IPS fails.

2) CSC is not 100% substitute for IPS.

3) It depends on your network.

353
Views
0
Helpful
1
Replies
CreatePlease to create content