cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1175
Views
0
Helpful
1
Replies

Best way to Install IPS modules in ASA's in Failover

Patrick Weir
Level 1
Level 1

We have a customer with a pair of ASA 5585-x in failover mode.  They are looking to install a pair of IPS modules in these ASA's.

Is there a way to install the IPS modules without any downtime.  I know for failover the ASA's have to have the same hardware, so if I install the IPS module in the standby unit it will break the failover between the ASA's.

What is the best way of doing this with as little downtime as possible.

I know I could bring down the standby ASA install the module, and then when it's booting up power down the primary ASA and then install the module into this ASA.  Is this the best way or is there a way to achieve this with zero downtime?

1 Reply 1

mkazimh
Level 1
Level 1

We did it recently for pairs of 5510 an 5520. Yes you have to bring both firewalls down for that. Failing over will not work as you mentioned will break failover.

You do not need downtime more than 2-3 mins for that.

Review Cisco Networking for a $25 gift card