cisco asa 5510 + csc10 + HA

[tomasz.rajkowski]

hello,

I don't know where to ask about it, but, I would like to configure ASA5510 with csc10 (antispam, content filter, antivirus) for 250 users and I would like to have second ASA 5510 + csc10 as a HA (standby) , is this configuration possible ? what kind of licenses I will need for all ASA ? all need to have the same licenses ?

thanx

Tom.

[Jouni Forss]

Hi,

To my understanding you will need atleast Security Plus license on the ASAs to get Active/Standby Failover working.

Otherwise if you are running software 8.3 or newer, only 1 of the devices needs the License to get some feature. I'm not sure what the current situation is since it seems every time I try to check something related to Licenses, something has changed (to be honest I dont have to worry much about licensing myself in my work)

Also to my understanding the additional modules on the ASA will need to be kept in identical configurations manually as there isnt any kind of automatic configuration replication between the modules.

Heres some documentation related to the different ASA5510 setups from Cisco site

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/prod_brochure0900aecd80402e36.html

• At the bottom of the document there is a table of different ASA5510 setups and licenses

- Jouni