ASA 5585X with IPS and ASA 5585 with no IPS HA

[Diky Heryadi]

Hi All,

My customer has 2 ASA and want to implement HA with transparent deployment. But the problem is my customer has ASA5585-SSP-20 w/ IPS SSP 20 and ASA5585-SSP-20 w/ no IPS module. They don't wanna use their IPS, just wanna use the ASA. Can I make it possible to implement HA? I think if I uninstall IPS module on first ASA, logically first ASA will be the same with second ASA right? Can I do that?

Thanks for your best response,

Diky

[Marvin Rhoads · Accepted solution]

Yes, you can do that.

The hardware (including installed modules such as IPS) does need to match when creating the HA pair.

[Diky Heryadi]

Hi Marvin,

Nice, thanks!