Redundant ASAs, only single IDS module in primary -- supported config?

adrian_chung — Mon, 11 Mar 2019 12:17:52 GMT

Stupid question:

If I have two ASAs, but only one IDS module, can I put the module in the primary ASA, configure it, and in the event of failover go without IDS functionality on the secondary?

Two questions:

1) Is this a Cisco supportable configuration?

2) Will the IDS configuration sync to the secondary and just be silently ignored so that the secondary will still function, or will the IDS configuration fail and break functionality on the secondary because it can't process the IDS configuration.

Thanks!

Re: Redundant ASAs, only single IDS module in primary -- support

abinjola — Fri, 14 Mar 2008 22:22:03 GMT

1)NO

Failover requires exact same hardware

2)NO

IDS configs are not synched

topic Redundant ASAs, only single IDS module in primary -- supported config? in Network Security

Redundant ASAs, only single IDS module in primary -- supported config?

Re: Redundant ASAs, only single IDS module in primary -- support