SourceFIRE module clustering?

mythosmc1 — Tue, 12 Mar 2019 12:41:34 GMT

If I am running two ASAs in cluster mode, is there any special configuration I need to do on the sfr modules ?

Does the pair of clustered ASAs forward traffic to both sfr modules?

The documentation is very vague on the topic of sourcefire clustering, all it really says is "keep consistent policies on the sfr modules and dont use zones for your rules"

Is there any additional licenses required? i.e I have 2x control + protect however only 1 AMP / URL license

Does that mean only one of the SFR modules can process Malware and URL filtering?

Any help would be greatly appreciated

thanks

Modules are cluster-unaware.

miculp — Thu, 04 Jun 2015 04:36:30 GMT

Modules are cluster-unaware. They will operate as if they are sitting in a standalone firewall so you'll need to configure your class mappings accordingly.

Zones work perfectly fine in clusters, HA pairs, standalone firewalls. Have at it.

You will need one license for each module, so yes, only one of your modules will have Malware and URL filtering.

topic Modules are cluster-unaware. in Network Security

SourceFIRE module clustering?

Modules are cluster-unaware.