09-30-2016 08:08 AM - edited 03-20-2019 09:05 PM
Hello All,
I would not consider this to be bug. Filesystem on the ASA firewalls is not automatically replicating/copying from active unit to standby. I have never seen such a behavior. It is same analogy as with the OS - if you need to do the OS upgrade, you copy the image manually to both and then do the upgrade. Same applies for ASDM, Anyconnect images etc as far as I know.
Jaro
09-30-2016 08:18 AM
While I might agree for AC and CSD binary images, the XML profiles should absolutely be replicated across in an A/S pair just like a standard configuration change.
I don't know if there's a technical limitation to doing this for the Cisco DEs, but if any of them administer an ASA VPN pair they would know how ridiculous it is to manually copy files between a cluster just because you checked a new feature box for an AnyConnect profile in ASDM.
10-11-2016 05:22 AM
Yes, I agree absolutely. So it turns out that there is an issue with anything what requires copy/replication of "file" (created after configuring the AC profile) from active to standby device. If it is related to the "config" itself, that is replicated without any issue.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide