CISCO SSM 10 signature update in failover
Hi friends,
Two CISCO SSM-10 modules configured in ASA 5520 failover mode.
My question is :-
If i update signature of active firewall IPS module then is secondary firewall IPS gets update signatures or not ?
how secondary IPS gets signature from Active IPS ?
for signature synchronization do we required any special configuration ?
Two CISCO SSM-10 modules configured in ASA 5520 failover mode.
My question is :-
If i update signature of active firewall IPS module then is secondary firewall IPS gets update signatures or not ?
how secondary IPS gets signature from Active IPS ?
for signature synchronization do we required any special configuration ?
Do more with
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
>>If i update signature of active firewall IPS module then is secondary firewall IPS gets update signatures or not ?
No, Ive upgraded SSM-CSC before, and the underlying hardware is the same, update the standby firewall, then make it the active firewall, upgrade the other, then fail them back.
The SSM module is essentially a 'PC on a board' that sits beside the ASA. it does not share its flash/disk0: drive.
Id update the ASA and ASDM at the same time :) 9.2(2) is my current fav and least problematic OS
Cisco ASA 5500 Active/Standby - Zero Downtime Upgrade
Pete
No, Ive upgraded SSM-CSC before, and the underlying hardware is the same, update the standby firewall, then make it the active firewall, upgrade the other, then fail them back.
The SSM module is essentially a 'PC on a board' that sits beside the ASA. it does not share its flash/disk0: drive.
Id update the ASA and ASDM at the same time :) 9.2(2) is my current fav and least problematic OS
Cisco ASA 5500 Active/Standby - Zero Downtime Upgrade
Pete
Premium Content
You need an Expert Office subscription to comment.Start Free Trial