03-16-2014 05:01 AM - edited 03-10-2019 06:09 AM
Hi,
I am planning to cluster 4 ASA firewalls between 2 DCs.
I would like to know if the ASA IPS appliance will also be clustered with the 4 ASAs or I will need to buy the ASA IPS hardware module?
In case I will need to buy the ASA IPS hardware module it will run as unique module or it could also be clustered?
Thank you very much for the help.
Regards,
J
Solved! Go to Solution.
03-16-2014 05:25 AM
The Documentation states that IPS is handled individually per unit. So each unit will have it's own IPS and protects the traffic it sees. Without a config-replication available for IPS, you should plan to use an enterprise Management-system like CSM to make sure all units have the same config.
03-16-2014 05:25 AM
The Documentation states that IPS is handled individually per unit. So each unit will have it's own IPS and protects the traffic it sees. Without a config-replication available for IPS, you should plan to use an enterprise Management-system like CSM to make sure all units have the same config.
03-16-2014 06:09 AM
Thanks Karsten for the clarification. Now it is clear for me.
Regards,
J
03-16-2014 06:21 AM
Hi Karsten,
sorry to make you another question, but I want to be sure I don't have another option.
For the IPS I will be forced to use an IPS hardware module at slot 1 of the ASA Firewall or I will be available to use the IPS software version inside the ASA?
Thanks.
Regards,
J
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: