10-16-2013
07:20 AM
- last edited on
02-21-2020
11:24 PM
by
cc_security_adm
I currently have two ASAs configured as Active and Standby. I need to install CA certificates and apply them on the management interfaces of the ASAs as part of a network audit project. Will I be able to change configurations on one ASA at a time to generate the RSA keys and install the certs without harming the config synchronization on both ASAs?
10-16-2013 07:33 AM
When you make config changes on the active member of a failover pair then the change is automatically sent to the standby member. If you really want to configure the ASAs separately then you need to remove the standby/failover configuration, make the changes separately, then re-configure standby/failover.
HTH
Rick
10-16-2013 08:27 AM
Thanks that makes sense.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide