topic This possibility is valid in Web Security

Wsa config sync

Sindibade 78 — Sat, 03 Dec 2016 20:51:58 GMT

hello, i looking for confirmation is the async os will provide a config sync in the next release when deploying two appliances in HA with explicit mode.

thanks

The functionality still not

Handy Putra — Sun, 04 Dec 2016 01:52:18 GMT

The functionality still not in the roadmap yet.

You can do that if you have SMA (Security Management Appliance) since that appliance is intended to do centralise management and also reporting for multiple WSAs. Therefore if you make a change in SMA for WSA appliance, you can push out to all WSA appliances therefore all WSA has identical configuration.

This possibility is valid

Sindibade 78 — Mon, 05 Dec 2016 23:17:57 GMT

This possibility is valid when we use two WSA connected in HA via VRRP actif/standby deployement?

Thanks.

Yes.

Ken Stieers — Mon, 05 Dec 2016 23:27:13 GMT

Yes.

If I remember correctly, the SMA will manage the policy configuration, but not the network or security config. You set up the System Admin, Network sections as normal for each box. Make the Security Services section match for the boxes, the SMA will tell you what doesn't match, but won't fix it for you (ENHANCEMENT REQUEST!!!!!), and then you can build the policies on the SMA and push them to the WSAs.

Ken