Thoughts on adding AIP firewalls to existing CSC firewalls setup as failover

[tahequivoice]

I have a customer with active/standby on a pair of 5510's with the CSC modules. They were inquiring about the AIP/ASA, and since this would NOT work in their current setup, would getting a pair of 5510/AIP configured for transparent failover work placed in front fo the existing units? Would I need to have a switch placed between the AIP and CSC ASA's?  Or would I setup the ASA's for context based Active/Active failover to interconnect the ASA's to the existing units, but I still see a need for a switch.

[Maykol Rojas]

Hi,

As a recommendation, I would suggest you to buy an IPS sensor appliance instead of buying 2 more ASA's. I think it would be easier and since what you only need is the IPS functionality, you can go ahead and buy this solution and locate it between the ASA and the Internal switch without harming the current IP scheme.

Cheers

Mike Rojas