How to switch to VPN automatically on ASA 5508?

[ksavochkin]

Hi there. 

I need an advice, maybe you could help me? 

There is ASA 5508 firewall with 2 external lines. 

The first one is used for company's internal needs, no internet is available here. 

The second line is used for Internet. Also it can be used for VPN connection to the internal network in case the first line is unavailable. Currently I need to change routes to VPN connection in case 1st line is unavailable manually.

The question is if it is possible to create a script or configure the Firewall so it could be possible for Firewall to switch to VPN connection (and use different routes)  automatically in case of 1st line is unavailable? 

Thank you in advance for advising.

[MHM Cisco World]

You mean that ASA connect to WAN and ISP and you need to shift the traffic to ISP in case the WAN failed ?

[ksavochkin]

Hi there,

Thank you for your reply.

There are two WAN's.

In case of one WAN becomes unavailable the second WAN should change it's routes automatically.

[Georg Pauwen]

Hello,

which ASA version are you running ? EEM was introduced I think on 9.2...

[ksavochkin]

Hi there.

ASA version is higher, so it should support EEM. Will take a look at that, thanks a lot!