Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We have a Cisco ASA spoke and hub configuration for VPN access where a main 5510 is the hub for about 80 5505's. In the past, with some ISPs we had to make the following changes: sysopt connection tcpmss 1260crypto ipsec df-bit clear-df outside I go...
I have two ASA 5510 appliances in Active/Standby mode. I am thinking about buying two used IPS modules and installing them. My question is, does this require me to purchase 1 or 2 IPS licenses? We are on 8.4 right now, and I see in 8.3 Cisco chang...
Can you explain at a high level how certificates work in this scenario? I have this setup and we are implementing a new PKI infrastructure. I'd like to make sure I get the certs right for the wireless authentication to still work.Does each client ...
Sorry to drop one more question about this, but I'm confused what parts and services I need to purchase for this. We have a 5510 ASA with security plus license. I want to install the IPS module and then whatever else I need to have support and get ...
Ok, that is what I needed to know. The purpose of us having an active/standby ASA is to keep the business up and going for the very rare times there could be an active ASA failure. The purpose for the IPS would be to help protect and inspect traffi...
Thanks for the reply. So if that's the case then do I need to purchase two physical modules, one for each ASA, and then only license the primary one? Or could I even get away with only buying one module for the primary ASA and not even putting an ...
That unfortunate. It seems like with the VPN licensing they realized if you were in an active/standby configuration then you should only have to pay for one license, thus the license change in 8.3+ only requires you to purchase one license. I thoug...
