Cisco ASA 5520 in HA

[essa.anas]

Hi,

  I have the following Setup, Two Cisco ASA 5520 needed to be  configured in HA Active/Passive. The Firewalls includes also AIP module. Does the ASA 5520 will internally make the AIP modules also HA Active/Passive? Is there a document regarding the issue? Is there a seperate license for the AIP modules for HA scenario?

Regards

Essa Anas

[Jennifer Halim]

The AIP module will not participate in the ASA HA. However, if your ASA is running in Active/Passive HA failover, you would need to have the same module installed on both ASA, otherwise, the ASA HA will not work.

The AIP module works independantly of each other, ie: config will not be replicated between the 2 AIP modules. You wuold need to configure each AIP module independantly.

You would also need to have IPS subscription license for each module so you can update the signature to the latest signature packs (signature is released every few days).

Hope that answers your question.