https://community.cisco.com/t5/network-security/asa-cluster/m-p/4117929#M1071999 <P>Good day,</P><P>&nbsp;</P><P>We have ASA cluster, routing is symmetrical, so whatever traffic leaves through the master F/W it returns through the same firewall, same with the slave.. According to my limited understanding to how cluster works (I'm network guy not a security guy), we shouldn't see any user traffic on the CCL link, however we still see some traffic on the links.. Can someone to please explain why?</P><P>&nbsp;</P><P>Thank you in advance</P> Mon, 13 Jul 2020 20:18:18 GMT ahmede1 2020-07-13T20:18:18Z https://community.cisco.com/t5/network-security/asa-cluster/m-p/4117929#M1071999 <P>Good day,</P><P>&nbsp;</P><P>We have ASA cluster, routing is symmetrical, so whatever traffic leaves through the master F/W it returns through the same firewall, same with the slave.. According to my limited understanding to how cluster works (I'm network guy not a security guy), we shouldn't see any user traffic on the CCL link, however we still see some traffic on the links.. Can someone to please explain why?</P><P>&nbsp;</P><P>Thank you in advance</P> Mon, 13 Jul 2020 20:18:18 GMT https://community.cisco.com/t5/network-security/asa-cluster/m-p/4117929#M1071999 ahmede1 2020-07-13T20:18:18Z https://community.cisco.com/t5/network-security/asa-cluster/m-p/4117939#M1072004 <P>If traffic happens to arrive on one of the slaves (or master for that matter) where another firewall is the flow owner, that traffic is forwarded to the flow owner for further processing.&nbsp; It might be this traffic that you are seeing.</P> Mon, 13 Jul 2020 20:38:46 GMT https://community.cisco.com/t5/network-security/asa-cluster/m-p/4117939#M1072004 Marius Gunnerud 2020-07-13T20:38:46Z