topic IPSec support for Active/Active config on ASA in Network Security

IPSec support for Active/Active config on ASA

bvsnarayana03 — Mon, 11 Mar 2019 12:10:05 GMT

Hi,

I was going through the link for help on configuring failover for multiple contexts & came across a strange statement. Can someone pls help clarify this, "When the security appliance is configured for Active/Active stateful failover, you cannot enable IPSec or SSL VPN. Therefore, these features are unavailable. VPN failover is available for Active/Standby failover configurations only".

Here is the link:

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/failover.html

thanks

BVS

Re: IPSec support for Active/Active config on ASA

cdusio — Sat, 01 Mar 2008 13:25:52 GMT

It is as it says. If you are running active active you cannot terminate VPN traffic wheras if you are in active/standby you can.

Re: IPSec support for Active/Active config on ASA

cisco24x7 — Sat, 01 Mar 2008 14:20:49 GMT

If you want Active/Active...Active firewall

that can also terminate VPN and/or ssl VPN,

checkpoint can do that.

Even with Cisco ASA in Active/Active, it is not

really Active/Active. It is similar to IOS

HSRP but not as flexible as HSRP.

CCIE security