AIP-SSM reset without triggering Failover

[GurjitSra]

Hi all, we have two asa 5510 in Active/Standby fail over mode with AIP-SSM modules. We have urgent requirement to reset AIP-SSM module. Is it possible to do this without triggering fail over on asa. Somewhere its mentioned that its possible by removing ips policy on ASA. Has anyone done that without resulting into fail over.

[Marvin Rhoads]

Yes I have done this.

When there is no active policy redirecting traffic to the IPS module, its operational status will not affect failover state of an HA pair.

Be sure it is operational before re-enabling the policy.