topic Cisco IOS Firewall HA in Network Security https://community.cisco.com/t5/network-security/cisco-ios-firewall-ha/m-p/1880237#M492598 <P>I'm looking to use 2x 2901 Routers as firewalls on my network.</P><P></P><P>Will this work? </P><P></P><P>Will the configurations stay in sync? If not how do other people manage this?</P><P></P><P>Or should I just buy&nbsp; 2x ASA 5510 and build active/standby </P> Mon, 11 Mar 2019 21:54:20 GMT martinbuffleo 2019-03-11T21:54:20Z Cisco IOS Firewall HA https://community.cisco.com/t5/network-security/cisco-ios-firewall-ha/m-p/1880237#M492598 <P>I'm looking to use 2x 2901 Routers as firewalls on my network.</P><P></P><P>Will this work? </P><P></P><P>Will the configurations stay in sync? If not how do other people manage this?</P><P></P><P>Or should I just buy&nbsp; 2x ASA 5510 and build active/standby </P> Mon, 11 Mar 2019 21:54:20 GMT https://community.cisco.com/t5/network-security/cisco-ios-firewall-ha/m-p/1880237#M492598 martinbuffleo 2019-03-11T21:54:20Z Cisco IOS Firewall HA https://community.cisco.com/t5/network-security/cisco-ios-firewall-ha/m-p/1880238#M492599 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>the NAT sessions can be synced with the SNAT feature but it is phased out by Cisco and maybe it isn't supported on newer platforms like the 2901.</P><P>Cisco recommends using active/standby or active/active ASA pair for redundancy/failover.</P><P></P><P>Regards.</P><P></P><P>Alain</P></BODY></HTML> Wed, 23 Nov 2011 13:01:09 GMT https://community.cisco.com/t5/network-security/cisco-ios-firewall-ha/m-p/1880238#M492599 cadet alain 2011-11-23T13:01:09Z Cisco IOS Firewall HA https://community.cisco.com/t5/network-security/cisco-ios-firewall-ha/m-p/1880239#M492600 <HTML><HEAD></HEAD><BODY><P>Thanks for the reply</P><P></P><P> ASA 5510 it is then. Hope the boss doesn't mind the extra cost.</P></BODY></HTML> Wed, 23 Nov 2011 13:05:13 GMT https://community.cisco.com/t5/network-security/cisco-ios-firewall-ha/m-p/1880239#M492600 martinbuffleo 2011-11-23T13:05:13Z