ESA DC & DR setup

[yusufmaknojia786@gmail.com]

Hi Team,

I want to do ESA clustering over the WAN, Whereas Site A have two ESA which is already running in a cluster and Site B have only one ESA, i want Site B ESA should be in a Site A cluster. Site A and Site B are connected each other over the WAN.

Can I do this clustering over the WAN, need your help.

Regards,

Yusuf

[jorandre]

I don't foresee any issues with this. As long as the ESA at site B can connect to the ESA's in site A via SSH (or CCS port 2222 if you are using that) and visa versa, you should be fine. Just know that each device will maintain a connection to all the other devices in the cluster. So, ESA in site B should maintain 1 connection to each ESA and it should receive 1 connection from each ESA with a total of 4 connections over the WAN.

I hope that answers your question.

[yusufmaknojia786@gmail.com]

Thanks for reply,

 https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/200885-ESA-Cluster-Requirements-and-Setup.html

we are referring this document for Clustering. if you have any other documents please share the link.  

[jorandre]

Here is the section of the end-user guide regarding clustering for version 11.1: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_11_1_chapter_0101000.html

You should find a similar section for whatever version you are running.

Let me know if you have any other questions.