Cisco ASA Failover between same hardware and version. But one is k8 and the other k9

[teatrodelsogno]

Hi,

following the title I'd like to know if failover mechanism could be created between two identical cisco asa firewall and SO, but with different licenses in the crypto. (k8 and k9).

NOTE:
We don't use AES encryption

We can downgrade the k9 to k8?

Regards

[Karsten Iwen · Accepted solution]

Both units need to have the same encryption-license.

I'm not sure if you can easily remove a k9-license, but upgrading the k8-unit to k9 is trivial:

1. Login to http://www.cisco.com/go/license
2. Provide the serial-number of the ASA with the k8-license
3. you'll receive the new license in you e-mail some minutes/hours later and can add that to the ASA

[teatrodelsogno]

I'm not sure me too, but the "clean" way to do it, is following your suggestion with new licensing.

Regards