topic ASA cluster with IPS in Network Security

ASA cluster with IPS

Jordi Benet — Sun, 10 Mar 2019 13:09:55 GMT

Hi,

I am planning to cluster 4 ASA firewalls between 2 DCs.

I would like to know if the ASA IPS appliance will also be clustered with the 4 ASAs or I will need to buy the ASA IPS hardware module?

In case I will need to buy the ASA IPS hardware module it will run as unique module or it could also be clustered?

Thank you very much for the help.

Regards,

The Documentation states that

Karsten Iwen — Sun, 16 Mar 2014 12:25:40 GMT

The Documentation states that IPS is handled individually per unit. So each unit will have it's own IPS and protects the traffic it sees. Without a config-replication available for IPS, you should plan to use an enterprise Management-system like CSM to make sure all units have the same config.

Thanks Karsten for the

Jordi Benet — Sun, 16 Mar 2014 13:09:59 GMT

Thanks Karsten for the clarification. Now it is clear for me.

Regards,

Hi Karsten,sorry to make you

Jordi Benet — Sun, 16 Mar 2014 13:21:41 GMT

Hi Karsten,

sorry to make you another question, but I want to be sure I don't have another option.

For the IPS I will be forced to use an IPS hardware module at slot 1 of the ASA Firewall or I will be available to use the IPS software version inside the ASA?

Thanks.

Regards,