topic Thanks everyone! in Network Security

High Availability question

james.silvius — Tue, 12 Mar 2019 07:38:52 GMT

We are currently looking to buy new ASA 5515-X boxes for our facilities.

Can you configure high availability between the 5515-X and a 5510, or do they have to be like devices?

I've googled and searched the support forum, but I haven't been able to find an answer.

Thanks

Don't buy a 5515-X. It was

Philip D'Ath — Wed, 20 Apr 2016 20:44:56 GMT

Don't buy a 5515-X. It was replaced by a 5516-X. Same price. Much much faster, and has improved Firepower support (if you want that).

No, you can not do HA between a 5515/5516 and a 5510. The models (and in most but not all cases the licences also) must be exactly the same.

I would agree with what

nspasov — Wed, 20 Apr 2016 23:22:18 GMT

I would agree with what Philip said, the 5516 is a much better choice.

For your goole reference,

Marvin Rhoads — Thu, 21 Apr 2016 03:30:52 GMT

For your google reference, here is the citation re failover requirements:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/general/asa-96-general-config/ha-failover.html#ID-2107-0000001c

The two units in a Failover configuration must:

Be the same model.

Have the same number and types of interfaces.

Have the same modules installed (if any)

Have the same RAM installed.

Thanks everyone!

james.silvius — Thu, 21 Apr 2016 11:52:30 GMT

Thanks everyone!

And thank you for the pointer Marvin. I thought I had read that somewhere, but I couldn't find it again.