topic The ASA 5585-X high in Network Security https://community.cisco.com/t5/network-security/custer-firesight/m-p/2804659#M44342 <P>The ASA 5585-X high availability cluster will have no awareness of the failover event or failover state of the inline 3D8140 unless their failover causes a monitored interface link to go down on one of the ASAs.</P> <P>If the 3D8140 is configured per best practice to fail-open on the network module's inline interface, this will never happen.</P> <P>A true highest availability design would have interfaces from each ASA going to both inline IPS appliances. They could be in an Etherchannel or configured as redundant interfaces, depending on your throughput requirements and number of available interfaces.</P> Fri, 18 Dec 2015 13:54:21 GMT Marvin Rhoads 2015-12-18T13:54:21Z Custer FireSIGHT https://community.cisco.com/t5/network-security/custer-firesight/m-p/2804658#M44341 <P>I have two ASAs 8525-X high availability configure Active/Standby and I add new deployment with two Managed Device 3D8140.</P> <P>¿What is the best design for have high availability in Firewall ASA and FireSight?</P> <P>FireSight works in inline mode, I want configure individual device in a cluster with high availability link interface</P> <P><BR />¿What could happen with the ASA when failover occurs in the IPS?<BR />Does change the secondary ASA to active state?</P> Sun, 10 Mar 2019 13:31:39 GMT https://community.cisco.com/t5/network-security/custer-firesight/m-p/2804658#M44341 audiel.santiago 2019-03-10T13:31:39Z The ASA 5585-X high https://community.cisco.com/t5/network-security/custer-firesight/m-p/2804659#M44342 <P>The ASA 5585-X high availability cluster will have no awareness of the failover event or failover state of the inline 3D8140 unless their failover causes a monitored interface link to go down on one of the ASAs.</P> <P>If the 3D8140 is configured per best practice to fail-open on the network module's inline interface, this will never happen.</P> <P>A true highest availability design would have interfaces from each ASA going to both inline IPS appliances. They could be in an Etherchannel or configured as redundant interfaces, depending on your throughput requirements and number of available interfaces.</P> Fri, 18 Dec 2015 13:54:21 GMT https://community.cisco.com/t5/network-security/custer-firesight/m-p/2804659#M44342 Marvin Rhoads 2015-12-18T13:54:21Z