![]() ![]() Like other ASA licenses, the IPS module license is technically shared in the failover Cluster license. The IPS signature subscription requires a unique IPS module license for each unit.You need the IPS signature subscription on both units this subscription is not shared in failover because it is not an ASA license.To buy the IPS signature subscription you need the ASA with IPS preinstalled (the part number must include “IPS”: for example, ASA5515-IPS-K9) you cannot buy the IPS signature subscription for a non-“IPS” part number ASA.You also need the IPS signature subscription on the IPS side for both units. ![]() Security Plus license for the ASA 55-X: The Base license does not support failover, so failover cannot be deployed in these systems on a standby unit that has only the Base license.īoth units must have the same encryption license.īoth units in an ASA 5512-X through ASA 5555-X system require the IPS module license. (Table 1 shows the licensing requirements for cluster units.) If you have licenses on multiple units, they combine into a single running ASA Cluster license. Typically, you buy a license only for the primary unit secondary units inherit the primary license. If you have licenses on both units, they combine into a single running failover Cluster license.Ĭluster units do not require the same license on each unit. Typically, you buy a license only for the primary unit for active/standby failover, the secondary unit inherits the primary license when it becomes active. Starting with Release 8.3(1), you no longer need to install identical licenses. Older versions of ASA software required that the licenses matched on each unit. Failover units or standby appliances do not require the same license on each unit.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |