Is there an ESA clustering solution that presents a virtual ip address to an inside Exchange server and/or an outside MTA, in other words operational clustering? These c170 ESAs are already clustered for configuration purposes but the interfaces are physically separate.
I'd like to come up with an SMTP failover configuration that works in a particular environment.
A single ASA with two ISPs directly connected in the normal ISP standby/failover configuration
A single Exchange server inside sending to both smart hosts (ESAs)
So far the limitations are
outbound from the inside, Exchange cannot selectively send to one ESA or another unless the ESA private interface itself was down
inbound on the ASA if publish the 2nd ESA to the failover interface before failover occurs that according to TAC doesn't work until failover
inbound on the ASA if we wait until failover to publish the 2nd ESA to the failover interface we need DNS failover to make that work.
Re:Operational (vs Configuration) Clustering of ESAs
Virtual IP functionality is currenly unsupported, it is on the roadmap though. Currently you can use DNS load balancing to specify a single server on either Exchange or internet, or you can use the standard MX records..
Inviting all Security & Networking professionals! We want you to tell us what devices you use to do your work and its screen resolution. Your response will help us improve network and security management tools.
Click here to take the 5-minute s...
This guide is intended to show some nifty and powerful use cases that a lot of customers either want or don’t know they want. There are tons of other content out there for specific knobs or capabilities, but this is looking to be a more complete...
Since ASDM 7.12(2) I am no longer able to run ASDM on CentOS 7 using javaws. It appears to launch and dies. However, I am now running ASDM directly in java and it works fine.First attempt "javaws https://<ip of firewall>/admin/public/asd...
User Experience Enhancements
Expansion of Activity Descriptions
Activity Descriptions provide more context and help with understanding and security implications of suspicious Activities. With this update, we are expanding the coverage to a vast majority o...