ASA 5585-X with Firepower SSP

[Doug Barnes]

I haven't been able to find a definitive answer to whether or not the interfaces that come on the Firepower SSP module for a 5585-X are dedicated to Firepower or can be shared/used ASA Firewall component, i.e. would like to have my "inside" interface on the base SSP (slot 0) and my "outside" interface on the Firepower SSP module (slot1).  

Assuming I can do the above, is it also possible to do link aggregation with ports split between these modules (slots). 

[Marius Gunnerud]

Yes, you should be able to use the interfaces on the SSP module for regular data traffic, and you can aggregate the interfaces using LACP.

But passing traffic to SourceFire for inspection is still done via the policy-map configuration / backplane.

--

Please remember to select a correct answer and rate helpful posts