https://community.cisco.com/t5/network-security/asa-fail-over-configuration/m-p/3209913#M1065029 <P>Hello,</P> <P>&nbsp;</P> <P>We have two ASA5585s physically connected for FO. Two interfaces have been used; one interface is used for the State Link and the second link is configured for the LAN FO. I've read in some documentation that the recommended configuration for FO is to connect the two ASAs through a switch or two switches.</P> <P>&nbsp;</P> <P>I wanted to find out why it's better to connect the two ASAs via switch and not directly when configuring them for Fail-Over. Can someone explain to me the reasons why? </P> <P>&nbsp;</P> <P>Thanks in advance.</P> Fri, 21 Feb 2020 14:37:46 GMT zekebashi 2020-02-21T14:37:46Z https://community.cisco.com/t5/network-security/asa-fail-over-configuration/m-p/3209913#M1065029 <P>Hello,</P> <P>&nbsp;</P> <P>We have two ASA5585s physically connected for FO. Two interfaces have been used; one interface is used for the State Link and the second link is configured for the LAN FO. I've read in some documentation that the recommended configuration for FO is to connect the two ASAs through a switch or two switches.</P> <P>&nbsp;</P> <P>I wanted to find out why it's better to connect the two ASAs via switch and not directly when configuring them for Fail-Over. Can someone explain to me the reasons why? </P> <P>&nbsp;</P> <P>Thanks in advance.</P> Fri, 21 Feb 2020 14:37:46 GMT https://community.cisco.com/t5/network-security/asa-fail-over-configuration/m-p/3209913#M1065029 zekebashi 2020-02-21T14:37:46Z https://community.cisco.com/t5/network-security/asa-fail-over-configuration/m-p/3209940#M1065032 Hi,<BR /><BR />This might be the reason:<BR />"If you do not use a switch between the units, if the interface fails, the link is brought down on both peers. <BR />This condition may hamper troubleshooting efforts because you cannot easily determine which unit has the failed interface and caused the link to come down."<BR /><BR />Page 2: <A href="https://www.cisco.com/c/en/us/td/docs/security/asa/asa95/configuration/general/asa-95-general-config/ha-failover.pdf" target="_blank">https://www.cisco.com/c/en/us/td/docs/security/asa/asa95/configuration/general/asa-95-general-config/ha-failover.pdf</A><BR /><BR />br, Micke Thu, 02 Nov 2017 22:57:57 GMT https://community.cisco.com/t5/network-security/asa-fail-over-configuration/m-p/3209940#M1065032 mikael.lahtela 2017-11-02T22:57:57Z