topic Re: AIP-SSM reload in Network Security

AIP-SSM reload

Tshi M — Sun, 10 Mar 2019 10:32:37 GMT

does reloading the AIP-SSM module affect the ASA?

Re: AIP-SSM reload

vitripat — Fri, 30 Mar 2007 15:57:46 GMT

There are few conditions here.

- If you have ASA pairs in failover and you reload the SSM module on Primary ASA, then Primary ASA will failover to secondary ASA.

- If you dont have failover and you are using SSM services:

a) If SSM is configured as "fail-open", things will keep working fine.

b) If SSM is configured as "fail-close", this will block the traffic through ASA till SSM module comes up.

- If ASA is not using SSM module services, there wont be no issues whatsoever.

Hope that helps.

Regards,

Vibhor.

Re: AIP-SSM reload

Tshi M — Fri, 30 Mar 2007 16:13:41 GMT

Just to be clear, you are saying that if we aren't using the SSM module (i.e. the ASA is not configured to use it), we can safely reload it, right?

Re: AIP-SSM reload

vitripat — Fri, 30 Mar 2007 16:17:31 GMT

Exactly. If you dont have a policy-map using SSM module, then you can reload the SSM module and it wont affect the traffic through ASA. To give you more information, here is a link which gives information on how to configure ASA to use SSM module:

http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_7_2/conf_gd/firewall/ssm.htm#wp1050744

Hope that helps.

Regards,

Vibhor.

Re: AIP-SSM reload

Tshi M — Tue, 03 Apr 2007 15:13:00 GMT

I haven't tried the reboot yet but once I do. I will rate it accordingly. Regards,