03-23-2009 05:55 AM - edited 03-10-2019 04:33 AM
Hello,
on a point to point connection with a 5510 Firewall edition on each end does it make sense to add an IPS module on both 5510s or just one side? Perhaps there is a way for the one IPS module to monitor both sides and automatically terminate traffic on the other ASA as well?
Thanks in advance. All replies rated
03-23-2009 12:41 PM
Will these firewalls be communicating with any other devices outside of each other? If so you might want an IPS on both sides. If they are just communicating with each other then I would think having an IPS on both sides would be redundant.
03-24-2009 05:53 PM
Hello Larry,
thanks for the reply. These devices will be behind a 2800 series router on each end doing a VPN.
We will also have VPN access to our NOC for monitoring. Thoughts?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide