ASA 8.4 Active/Standby with SSL VPN

[ivan.martin]

Hi my name is Ivan

I would like to work with two ASA's 5550 in HA (Acitve-Standby)  like perimetral firewalls and also work with another ASA 5540 but like a SSL VPN Remote Access to end users.

Please could you help me how can i do it?. Wich will be the best topology to this scenary?. Perhaps i need to put the ASA 5540 SSL VPN together with the ASA's in HA directly in a port.

Regards

Ivan.

[Farrukh Haroon]

Ivan sorry but your question is not clear, can you please elaborate?

Somtimes its a good practice to put the VPN sever on a dedicated segment on the primary/permiter firewalls in a DMZ. This gives added protection to the VPN concentrator, but can also cause performance degradation.

So it all depends on the level of security and the possible threats in each particular environment.

Regards

Farrukh