How to achieve High Availability in Cisco Email Security Appliance?

[RohitDhiman5005]

Hi,

Can anyone explain to me how HA will work or How can we achieve HA in Cisco ESA?

https://explore.cisco.com/c/esa-and-msa-comprehe?x=PvJZWn&utm_campaign=email-security&utm_content=Guide&utm_medium=Owned&utm_source=Cisco.com+Product+Page&utm_term=

The above link explains the best design and deployment but I am unable to understand the HA deployment.

[ppreenja]

Hello Rohit,

To answer your query, ESA can be setup in a cluster but not in HA as we can in case of firewalls such as ASA.

You can read a little more about ESA clustering in the article below. 'Clustering' right now on the ESA basically just means sharing the configuration across multiple appliances. Unfortunately, there's no way to setup a true failover/HA configuration on the device as it stands right now. Aside from the ESA, however, you can always setup multiple MX records and/or load balancing to try and perform the requested functions.

http://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118174-technote-esa-00.html

I hope this answers your query.

Cheers,
Pratham

[Mohamed Abdullah]

@ppreenja 

dear 

can you help me by any tutorial or guide to apply this cluster 

[charella]

Good Day Abdullah,

Most implementations use “Creating Cluster over SSH” rather than “CCS.”

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/200885-ESA-Cluster-Requirements-and-Setup.html

Also this section from an older userguide:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_11_1_chapter_0101000.html

Good luck

Chris A.