ASA5512-IPS with failover - how do you config IPS for config sync and failover

[ccpagel]

Hi all,

I have a pair of 5512-X's with IPS. The ASA's are configured for failover with active/standby. Is it possible to configure the 5512-IPS is an active/standby state with configuration synchronisation?  I’ve been unable to locate any configuration documentation on this.

Your advice would be appreciated.

Regards,

Chris

[Karsten Iwen · Accepted solution]

There is no active/standby-state or replication as it is on the ASA. Both IPS-modules are configured completely independent. It's your responsibility to keep the two units in sync.

Yes, it's an improvable state and every admin in a small setup without a cetralized management is hoping for new features there.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[ccpagel]

Thanks for the info Karsten - this is what I suspected. Its far from ideal, lets hope Cisco address it in the future.

Regards,

Chris