topic Thanks for the advice and the in Network Security

Fail over between ASA's

tom0000037 — Tue, 26 Mar 2019 00:57:07 GMT

Hello,

I am currently trying to design a solution for the following example. I have two groups of Billing servers. A Primary group and a back up group. These groups are also in different locations, at each location I have an ASA 5508-X in front of them. the servers will also be connect to 2960's. My question is how can I set up redundancy between the firewalls, so if one server were to fail, its back up counter part will take over.

Thank you.

Hi Tom, You can use failover

rvarelac — Thu, 08 Oct 2015 15:49:58 GMT

Hi Tom,

You can use failover Active/standby based on your topology , but the switches must be interconnected. So if the ASA on location A goes down, the switch can redirect the traffic to location B.

Be advise the ASA must be licensed and running the same code and hardware model to apply the failover config. Also both must be at the same physical location.

Examples below:

Failover

http://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/77809-pixfailover.html

http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_general_config/ha_failover.html

Hope it helps

-Randy-

Thanks for the advice and the

tom0000037 — Thu, 08 Oct 2015 17:03:56 GMT

Thanks for the advice and the links to the cisco documentation Randy. I am going to read through that and try it out. I will keep you posted with results.

Thanks again.