When an ASA Device Fails, does it fail in open-state or closed-state?

[kbnayyar1]

When an ASA Device Fails, does it fail in open-state or closed-state? Meaning if the device stops working will it stop passing all traffic, or will it pass the traffic through.

Thanks

[erickflamenco]

Hi,

If tha ASA device fails it will be in closed-state, but if a CSC module or SSM module fails it depends on the rule action configured specified by the policy rule.

Policy-map outside-policy

        class outside-class1

          ips inline fail-open

or

Policy-map outside-policy

        class outside-class1

          ips inline fail-close

regards,

Erick