topic ASA Failover-VPN Issues in Network Security

ASA Failover-VPN Issues

jgorman1977 — Mon, 11 Mar 2019 14:04:24 GMT

Our ASA5510's recently failed over, and now I have a handful of VPN clients that can connect, but not route anywhere in our network. I'm not sure the configs have been properly synced, but I do not know how to confirm.

Re: ASA Failover-VPN Issues

darrenj — Tue, 28 Oct 2008 23:06:15 GMT

Silly question, but do the routes from your 'internal' network to the remote VPN clients point to the old 'failed' ASA or to the new ASA? Try checking this first 🙂

Cheers

Darren

Re: ASA Failover-VPN Issues

jgorman1977 — Tue, 28 Oct 2008 23:39:12 GMT

Darren,

They point to the virtual ip address, so that doesn't change on failover. It's only happened to half a dozen people or so. They can connect, but when I monitor the traffic, nothing is being passed. Very strange.

Thanks