ASA 5506-X HA options

[alexandersoliz]

We can see in the datasheet that the ASA 5506-X supports HA as Active/Standby.

Does this model of ASA also support cluster?

Does it need the security+ license in order to use A/S?

[gstreete · Accepted solution]

Yes, the Security Plus license is needed on the 5506-X to support failover (active/standby). Note security contexts are not supported with the 5506, so active/active failover is also not supported.

Clustering is not supported either.

http://www.cisco.com/c/en/us/td/docs/security/asa/asa93/configuration/general/asa-general-cli/intro-license.html/index.html#20490

[alexandersoliz]

What about the 5508-X and the 5516-X?

Do they support clustering?

[gstreete]

Actually this link is more up to date for the new models since they were supported in this version: of 9.4 code:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/configuration/general/asa-general-cli/intro-license.html/index.html#pgfId-2258718

So to answer your question and if you see from the tables in the document. No, neither support clustering but both do support contexts with Context license.  Clustering is more of a "DC feature".  We support a 2 unit cluster in the other 5500-X models for partners/customer lab use and testing but really it's more of a high-end feature for large thruput needs and scale.  Not a target use case of this low end environment.  Hope this helps.  Please mark question as answered if helpful..

[alexandersoliz]

Everything is clear now, thank you Glenn!

[alexandersoliz]

Glenn they should update the CCW tool since in the Sec+ license description states that it enables security contexts on the 5506-X ASA:

ASA5506-SEC-PL

ASA 5506-X Sec. Plus Lic. w/ HA, Sec Ctxt, more VLAN + Conns

[gstreete]

I notified the ASA PM team and they will fix the description. Thanks for bringing it to our attention.

Sent from my iPhone

[contrerasr]

Would the customer need to buy 2 licenses one for each ASA? would just ASA5506-SEC-PL suffice?

[wasifkhan]

HI Guys,

I got 1 question does 5516-X Firepower Box need Security Plus license to configure Failover ?