topic Hi Team, in Web Security

WSA clustering / configuration sync

Marcel Maeder — Fri, 08 Feb 2013 14:29:28 GMT

Hello

Is it possible to build a cluster with two WebSecurity Appliances? Or at least synchronize the configuration?

Regards Marcel

WSA clustering / configuration sync

Francisco Rodriguez — Fri, 08 Feb 2013 16:03:32 GMT

Hello:

Officially this is not supported out of the box, you need the Ironport M appliance to centralize and distributed the same config to the other WSA.
Since not always everything it's an absolute truth, there is a way using a linux box in the middle acting as an Ironport M that is able to register these changes and populate them to the rest of WSA, but this solution was built in house and work pretty well. The problem is that it's not supported by Cisco.

Regards

Francisco Rodriguez P.

Hi Team,

ymadheka — Thu, 23 Jun 2016 06:19:42 GMT

Hi Team,

Do we still require M-series to do the above, have read in the documentation about the master slave configuration of WSA appliances to do the policy synchronization.

WSA cluster is only for data

Tao Yang — Thu, 23 Jun 2016 06:38:33 GMT

WSA cluster is only for data traffic. You still need SMA for centralized policy management.

Hi Tao,

ymadheka — Thu, 23 Jun 2016 07:29:12 GMT

Hi Tao,

Thanks for the quick revert.

Does it require any specific version for the clustering to work, wanted to ensure that we are running the compatible version at customer end.

WSA HA was introduced in WSA

Tao Yang — Fri, 24 Jun 2016 00:15:23 GMT

WSA HA was introduced in WSA version 8.5.x. Please refer to the following release notes for more details. Hope it helps.

http://www.cisco.com/c/dam/en/us/td/docs/security/wsa/wsa8-5/WSA_8-5-x_Release_Notes.pdf

Re: WSA cluster is only for data

yohannugera — Thu, 18 Oct 2018 07:19:33 GMT

If we have a management appliance in the middle, what is the sort of clustering applicable in this scenario? Active/Active or Active/Standby?