CISCO SSM 10 signature update in failover

abdul moheed
abdul moheed used Ask the Experts™
on
Hi friends,

Two CISCO SSM-10 modules configured in ASA 5520 failover mode.

My question is :-
If i update signature of active firewall IPS module then is secondary firewall IPS gets update signatures or not ?
how secondary IPS gets signature from Active IPS ?
for signature synchronization do we required any special configuration ?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Technical Consultant
Commented:
>>If i update signature of active firewall IPS module then is secondary firewall IPS gets update signatures or not ?

No, Ive upgraded SSM-CSC before, and the underlying hardware is the same, update the standby firewall, then make it the active firewall, upgrade the other, then fail them back.

The SSM module is essentially a 'PC on a board' that sits beside the ASA. it does not share its flash/disk0: drive.

Id update the ASA and ASDM at the same time :) 9.2(2) is my current fav and least problematic OS

Cisco ASA 5500 Active/Standby - Zero Downtime Upgrade
Pete

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial