topic Re: asa active/standby ips in Network Security https://community.cisco.com/t5/network-security/asa-active-standby-ips/m-p/885956#M84867 <HTML><HEAD></HEAD><BODY><P>Yes, both IPS modules are actually active, only thing is that the standby ASA doesn't forward any traffic to the module in that unit. So you need to define both modules ip adresses in MARS.</P></BODY></HTML> Tue, 22 Jan 2008 02:03:42 GMT jan.nielsen 2008-01-22T02:03:42Z asa active/standby ips https://community.cisco.com/t5/network-security/asa-active-standby-ips/m-p/885955#M84865 <P>If I have two asas in active/standby with ips in each, how does that work, do I need to assign separate ip addresses and then define each separately to MARS</P> Sun, 10 Mar 2019 10:57:00 GMT https://community.cisco.com/t5/network-security/asa-active-standby-ips/m-p/885955#M84865 whanson 2019-03-10T10:57:00Z Re: asa active/standby ips https://community.cisco.com/t5/network-security/asa-active-standby-ips/m-p/885956#M84867 <HTML><HEAD></HEAD><BODY><P>Yes, both IPS modules are actually active, only thing is that the standby ASA doesn't forward any traffic to the module in that unit. So you need to define both modules ip adresses in MARS.</P></BODY></HTML> Tue, 22 Jan 2008 02:03:42 GMT https://community.cisco.com/t5/network-security/asa-active-standby-ips/m-p/885956#M84867 jan.nielsen 2008-01-22T02:03:42Z Re: asa active/standby ips https://community.cisco.com/t5/network-security/asa-active-standby-ips/m-p/885957#M84869 <HTML><HEAD></HEAD><BODY><P>Thanks Jan, one other question, I read that there is a performance inpact running ips inline. Do you have any experience on what that impact is...thx again</P></BODY></HTML> Tue, 22 Jan 2008 14:19:04 GMT https://community.cisco.com/t5/network-security/asa-active-standby-ips/m-p/885957#M84869 whanson 2008-01-22T14:19:04Z Re: asa active/standby ips https://community.cisco.com/t5/network-security/asa-active-standby-ips/m-p/885958#M84871 <HTML><HEAD></HEAD><BODY><P>That depends on how much traffic you are sending to the module in your service-policy, the IPS module is not as fast as the ASA firewall, so you can experience an increase in latency, and also bandwidth will be limited by the IPS module. Check the datasheets for actual numbers.</P></BODY></HTML> Thu, 24 Jan 2008 14:19:05 GMT https://community.cisco.com/t5/network-security/asa-active-standby-ips/m-p/885958#M84871 jan.nielsen 2008-01-24T14:19:05Z