Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

redundant ASA or PIX configuration

Posted on 2013-06-04
4
467 Views
Last Modified: 2013-11-29
For years I have used Sonicwall and set it up for redundant / failover.  I just set up a heartbeat cable between the two identical model Sonicwall devices, and if one dies, the other comes online with the exact same LAN and Inet IP addresses.

Is there a very, very simple document or tutorial to walk me through doing this exact same thing with two PIX or two ASA devices?

Oh, one other sidebar question.  do ASA devices also act as Intrusion Detection devices?  Or is that a different Cisco product?

thank  you,
Jeff
0
Comment
Question by:jgrammer42
  • 2
  • 2
4 Comments
 
LVL 28

Expert Comment

by:asavener
ID: 39219176
Active/Standby configuration:  http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807dac5f.shtml

There is basic IPS built into the ASA product.  There is a more full-featured IPS module that you can install and configure as well.
0
 

Author Comment

by:jgrammer42
ID: 39219201
asavener,
Yes, I have seen that link.  I was looking for something a little more "step by step".  but if that is all there is, I guess I can go with that.

What "basic IPS" functions are in the ASA.   And what more full-featured functions are added by that module?  (I am assuming this is a hardware add in module, correct?)

thank you,
Jeff
0
 
LVL 28

Accepted Solution

by:
asavener earned 500 total points
ID: 39219456
See these pages for info on what the ASA can do out of the box:

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/protect.html

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/inspect.html


The IPS module is a hardware add on.  It has the ability to perform advanced IPS functions, download updated patters/definitions, learn normal traffic patterns and alert when anomalies are detected, etc.

IPS module quick guide:  http://www.cisco.com/en/US/docs/security/asa/quick_start/ips/ips_qsg.html

IPS module overview:  http://www.cisco.com/en/US/prod/collateral/routers/ps5853/ps5875/prod_presentation0900aecd806ccf26.pdf
0
 

Author Closing Comment

by:jgrammer42
ID: 39219503
Thank you very much!
0

Featured Post

Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The next five years are sure to bring developments that are just astonishing, and we will continue to try to find the balance between connectivity and security. Here are five major technological developments from the last five years and some predict…
The related questions "How do I recover the passwords for my Q-See DVR" and "How can I reset my Q-See DVR to eliminate a password" are seen several times a week.  Here we discuss the grim reality of the situation.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question