HA with Cisco ASA + Aip-Ssm

[J_Vansen_S]

hi,

I have 2 units of Cisco ASA5520 and 2 units Aip-SSM20 module. Each slotted in the ASA firewall.

I would like to run the 2 ASA on HA - Active Standby.

My question is:- does the IPS works in Active stand by too, as what the ASA is doing?

As in:- if primary ASA+IPS(module) fails, secondary ASA+IPS(module) picks up traffic.

PLease advise

[Collin Clark]

Since there is no traffic flowing through the Standby device, there is no traffic going through the IDS. When the Active fails and the secondary takes over, traffic will then flow through the Secondary device IPS.

Does that answer your question?