topic IPS will support Filover?(Active/Stanby mode) in Network Security https://community.cisco.com/t5/network-security/ips-will-support-filover-active-stanby-mode/m-p/1685253#M56651 <HTML><HEAD></HEAD><BODY><P>Not in the same way the Cisco Firewalls support failover. There is no synchronization of TCP state between two IPS sensors placed in a High Availability pair. This become a problem if you have a dual rail HA environment that is Active/Active (traffic flowing on both rails) and traffic is allowed to flow asynchronously (a single TCP session can leave via one rail and return via the other). Cisco sensors do not perform well when they can not track TCP state.</P><P>As far as I've seen, only McAfee IPS sensors have state synchronization failover as a feature, although Tippingpoint sensors are well suited for single sensors in asynchronously routed environments.</P></BODY></HTML> Fri, 15 Jul 2011 14:53:22 GMT rhermes 2011-07-15T14:53:22Z IPS will support Filover?(Active/Stanby mode) https://community.cisco.com/t5/network-security/ips-will-support-filover-active-stanby-mode/m-p/1685252#M56649 <P>Hi,</P><P></P><P>Any one knows cisco IPS support failover(active/stanby)?.Please let me know !!!</P><P></P><P>Rajeswar.</P> Sun, 10 Mar 2019 12:24:41 GMT https://community.cisco.com/t5/network-security/ips-will-support-filover-active-stanby-mode/m-p/1685252#M56649 haivrajesh 2019-03-10T12:24:41Z IPS will support Filover?(Active/Stanby mode) https://community.cisco.com/t5/network-security/ips-will-support-filover-active-stanby-mode/m-p/1685253#M56651 <HTML><HEAD></HEAD><BODY><P>Not in the same way the Cisco Firewalls support failover. There is no synchronization of TCP state between two IPS sensors placed in a High Availability pair. This become a problem if you have a dual rail HA environment that is Active/Active (traffic flowing on both rails) and traffic is allowed to flow asynchronously (a single TCP session can leave via one rail and return via the other). Cisco sensors do not perform well when they can not track TCP state.</P><P>As far as I've seen, only McAfee IPS sensors have state synchronization failover as a feature, although Tippingpoint sensors are well suited for single sensors in asynchronously routed environments.</P></BODY></HTML> Fri, 15 Jul 2011 14:53:22 GMT https://community.cisco.com/t5/network-security/ips-will-support-filover-active-stanby-mode/m-p/1685253#M56651 rhermes 2011-07-15T14:53:22Z IPS will support Filover?(Active/Stanby mode) https://community.cisco.com/t5/network-security/ips-will-support-filover-active-stanby-mode/m-p/1685254#M56653 <HTML><HEAD></HEAD><BODY><P>Simply, IPS is a layer 2 device, there is no HA.</P></BODY></HTML> Fri, 15 Jul 2011 18:31:58 GMT https://community.cisco.com/t5/network-security/ips-will-support-filover-active-stanby-mode/m-p/1685254#M56653 Shaikh Aman Uddin 2011-07-15T18:31:58Z