topic Hi Philbert, in Network Security

ASA load balancing

philbert_manalo — Tue, 12 Mar 2019 07:04:01 GMT

hi,

i have Cisco asa 5508-x and Cisco asa 5506, can i use them both for load balancing?we have 2 internet provider in our office. thank you!

Best Regards,

Philbert

Hi Philbert,

Shivapramod M — Tue, 22 Dec 2015 06:12:14 GMT

Hi Philbert,

If you are planning to put these two devices in a failover (active/active) setup then it is not possible, since the failover requires same hardware units as members. Since you are using 5506 and 5508 it supports 9.4 version and the PBR is supported in version 9.4.1. Using the PBR you can configure the ISP load-balancing.

Please refer

http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/configuration/general/asa-general-cli/route-policy-based.html

Thanks,
Shivapramod M
Please remember to select a correct answer and rate helpful posts

hi Shivapramod,

philbert_manalo — Tue, 22 Dec 2015 06:29:45 GMT

hi Shivapramod,

thank you for the answer, so the thing is i can't use the 2 ASA to run in one network?

thanks,

Philbert

Hi Philbert,

Shivapramod M — Tue, 22 Dec 2015 06:38:18 GMT

Hi Philbert,

You can use two different firewall in your network. But what I mentioned that they can not be in failover setup or high availability.

Please refer

http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/configuration/general/asa-general-cli/ha-failover.html

If your goal is load-balancing of the ISP then you can configure the PBR in the ASA which is supported on version 9.4.1 and above only.

Thanks,
Shivapramod M
Please remember to select a correct answer and rate helpful posts