Keep ASA 5520's in sync

[sahlim]

Hello

I have two asa 5520 firewalls. one at my primay data center connected to our production Internet feed, and one at my failover datacenter connected to a backup internet feed. I was wondering if there was an easy way to keep the firewall rules in sync between the two firewalls. We have failover with our isp that will move our public facing address block from our primay site to our dr site in the event of a disaster so the ip addresses will not change if we were to have to fail over to the DR site. currently i just have to do any changes that i make on the failover server but would like a way to at least simi-automat this if not fully automat this so that i can eliminate the possability of human error of a change happening at primary but never getting don at DR.

[varrao]

Well that is a bit difficult to do if you are looking for something semi automatic, it woudl have only been possible, if you had failover running between the two firewalls as well, so I guess manual migt be your best option, but always keep a latest copy of the primary site ASA.

-Varun