Cisco ASA 5515-x + Cisco ASA CX

[VictorCL59]

My name is Victor.

I need your help to make my understanding clear about new Cisco ASA 5515-x, 5525-x.

I know that this device supports IPS which is included to this appliance without any additional modules.

But can this box support IPS and content-filering (Cisco ASA CX or so..) in the same time.

The problem also in next. Can two ASA 5510 with diffrent modules (in one AIP-SSM and in other CSC-SSM) be in active/active failover design?

[Jennifer Halim]

Hi Victor,

Cisco ASA CX module is currently only available on ASA 5585-X platform, not on the lower end ASA-X series platform. It will be available in the future.

The ASA 5585-X also can't support both the IPS and CX module on the same box. You would need to choose whether to use IPS or CX module on the appliance.

No, you can't have ASA 5510 running different modules in failover pair (whether it is Active/Standby, or Active/Active failover), this is not a supported design and it won't work. Failover checks that the same hardware and module exist between the 2 ASA devices.

[VictorCL59]

Thanks for quick answer.

May be I'll choose ASA 5515-x + WSA.

[Jennifer Halim]

Yes, that will definitely work.

[shahul hamid zehabar sathik aly haja meidine]

We have now 5515 x + Cisco ASA CX