High Availability question

[james.silvius]

We are currently looking to buy new ASA 5515-X boxes for our facilities.

Can you configure high availability between the 5515-X and a 5510, or do they have to be like devices?

I've googled and searched the support forum, but I haven't been able to find an answer.

Thanks

[Philip D'Ath · Accepted solution]

Don't buy a 5515-X.  It was replaced by a 5516-X.  Same price.  Much much faster, and has improved Firepower support (if you want that).

No, you can not do HA between a 5515/5516 and a 5510.  The models (and in most but not all cases the licences also) must be exactly the same.

[nspasov]

I would agree with what Philip said, the 5516 is a much better choice.

[Marvin Rhoads · Accepted solution]

For your google reference, here is the citation re failover requirements:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/general/asa-96-general-config/ha-failover.html#ID-2107-0000001c

The two units in a Failover configuration must:

• Be the same model.

• Have the same number and types of interfaces.

• Have the same modules installed (if any)

• Have the same RAM installed.

[james.silvius]

Thanks everyone! 

And thank you for the pointer Marvin. I thought I had read that somewhere, but I couldn't find it again.