Policy configuration Synchronization in Cisco WSA Virtual appliances HA.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-12-2017 11:49 PM - edited 03-08-2019 05:41 PM
1: We have a cluster of Cisco WSA Virtual appliances for HA. Does any one know how to keep the Policy configuration Synchronized in cluster.
2: Does this cluster provide load balancing of data traffic.
Appliance Version: C600v
AsyncOS: 10.0
- Labels:
-
Web Security
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-17-2017 06:14 AM
HA for WSA's is handled by the redirection method... eg WCCP, or PAC files, or a load balancer, etc. I think most people doing this use WCCP. The WSA's register with the router or firewall that they're there, and ready to take traffic, when one goes down, the router/fw sees that and just sends traffic to the remaining WSA.
Please see the below urls for more information.
http://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/118157-configure-wsa-00.html
http://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/118242-configure-wsa-00.html
http://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/117870-configure-wccp-00.html
http://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/118082-qanda-wsa-00.html
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-26-2017 11:39 AM
1. for configuration sync between WSA's use SMA . SMA can manage WSA and collect reporting data from both WSA
2.when WCCP used and When a WCCP client fails, the portion of the load handled by that client is automatically redistributed to the remaining WCCP clients in the service group.If no other WCCP clients are available in the service group, the service group is taken offline and packets are forwarded normally (fail open)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-03-2017 01:16 PM
Good day,
I would like to know if there is any document showing the step by step to perform load balancing and HA configuration between a WSA and vWSA through WCCP on a Cisco ASA Firewall.
On the other hand I have the doubt when this type of configuration is done as it is done so that when making some configuration change replicate in the two WSA (physical WSA and virtual vWSA).
Thank you in advance for the collaboration and help you give me.
