We have an ASA5505 with the Sec+ license. I'm comfortable setting up failover using tracked routes, and allowing simple inbound traffic to the current mapped interface IP. This requires that all internal destination IPs be PATed to the current inte...