ASA5506-X Primary and Cisco MX67 as Secondary

[ccnpter]

Hi! We have an existing ASA5506-X and we would like to have a warm standby firewall via Cisco Meraki MX67. Is this feasible? 

[Francesco Molino]

Hi

If by warm standby you meant HA or vrrp, it won't work.
The only thing would be playing with routing but we need to know how everything is interconnected to propose the best fit.

[Karsten Iwen]

As Francesco already mentioned, these devices can not be mixed in an HA setup.

But knowing my customers, I assume that you have the same use case as many of my customers. You are running a 5506-X want to have HA but don't want to invest in another 5506-X because it is outdated.

What I do in this case:

Deploy two Meraki MX appliances with Security License in HA. Due to the Meraki licensing, the Security-License only has to be bought once even if you have redundant appliances and you have the security of URL-filters, IPS and (well, limited because it's still only for HTTP) AMP. The ASA 5506 is kept for both remote-Access and site-to-site VPNs as the MX is quite limited here.