cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
20603
Views
6
Helpful
8
Replies

ASA 5506-X HA options

alexandersoliz
Level 1
Level 1

We can see in the datasheet that the ASA 5506-X supports HA as Active/Standby.

Does this model of ASA also support cluster?

Does it need the security+ license in order to use A/S?

1 Accepted Solution

Accepted Solutions

gstreete
Level 5
Level 5

Yes, the Security Plus license is needed on the 5506-X to support failover (active/standby). Note security contexts are not supported with the 5506, so active/active failover is also not supported.

Clustering is not supported either.

http://www.cisco.com/c/en/us/td/docs/security/asa/asa93/configuration/general/asa-general-cli/intro-license.html/index.html#20490

View solution in original post

8 Replies 8

gstreete
Level 5
Level 5

Yes, the Security Plus license is needed on the 5506-X to support failover (active/standby). Note security contexts are not supported with the 5506, so active/active failover is also not supported.

Clustering is not supported either.

http://www.cisco.com/c/en/us/td/docs/security/asa/asa93/configuration/general/asa-general-cli/intro-license.html/index.html#20490

What about the 5508-X and the 5516-X?

Do they support clustering?

Actually this link is more up to date for the new models since they were supported in this version: of 9.4 code:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/configuration/general/asa-general-cli/intro-license.html/index.html#pgfId-2258718

So to answer your question and if you see from the tables in the document. No, neither support clustering but both do support contexts with Context license.  Clustering is more of a "DC feature".  We support a 2 unit cluster in the other 5500-X models for partners/customer lab use and testing but really it's more of a high-end feature for large thruput needs and scale.  Not a target use case of this low end environment.  Hope this helps.  Please mark question as answered if helpful..

Everything is clear now, thank you Glenn!

Glenn they should update the CCW tool since in the Sec+ license description states that it enables security contexts on the 5506-X ASA:

ASA5506-SEC-PL

ASA 5506-X Sec. Plus Lic. w/ HA, Sec Ctxt, more VLAN + Conns

I notified the ASA PM team and they will fix the description. Thanks for bringing it to our attention.

Sent from my iPhone

Would the customer need to buy 2 licenses one for each ASA? would just ASA5506-SEC-PL suffice?

HI Guys,

I got 1 question does 5516-X Firepower Box need Security Plus license to configure Failover ?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: