topic Can the ASA IPS module be setup for configuration replication? in Network Security https://community.cisco.com/t5/network-security/can-the-asa-ips-module-be-setup-for-configuration-replication/m-p/449801#M90893 <P>While setting up two ASAs with IPS modules in an Active/Standby configuration, we were configuring the IPS modules and couldn't find any information on setting up the IPS modules in failover between the two ASAs such as configuration replication.</P><P></P><P>Do we have to duplicate config. changes on both IPS modules?</P> Sun, 10 Mar 2019 09:48:22 GMT MARK BAKER 2019-03-10T09:48:22Z Can the ASA IPS module be setup for configuration replication? https://community.cisco.com/t5/network-security/can-the-asa-ips-module-be-setup-for-configuration-replication/m-p/449801#M90893 <P>While setting up two ASAs with IPS modules in an Active/Standby configuration, we were configuring the IPS modules and couldn't find any information on setting up the IPS modules in failover between the two ASAs such as configuration replication.</P><P></P><P>Do we have to duplicate config. changes on both IPS modules?</P> Sun, 10 Mar 2019 09:48:22 GMT https://community.cisco.com/t5/network-security/can-the-asa-ips-module-be-setup-for-configuration-replication/m-p/449801#M90893 MARK BAKER 2019-03-10T09:48:22Z Re: Can the ASA IPS module be setup for configuration replicatio https://community.cisco.com/t5/network-security/can-the-asa-ips-module-be-setup-for-configuration-replication/m-p/449802#M90894 <HTML><HEAD></HEAD><BODY><P>You can put the same configs in both IPS modules, but the IPS devices don't share state like the firewalls. </P><P></P><P>So in a failover condition IPS may lose state of open TCP flows and TCP will need to do a reset to correct the problem. This is generally only a problem if you have a long flow such as a FTP file transfer going on. From a user perspective in most cases, you don't even know that you failed over to the secondary IPS occurred. Engineering is currently looking at sharing stateful information between IPS devices.</P></BODY></HTML> Tue, 20 Dec 2005 21:57:10 GMT https://community.cisco.com/t5/network-security/can-the-asa-ips-module-be-setup-for-configuration-replication/m-p/449802#M90894 gabelar 2005-12-20T21:57:10Z