Cisco ASA failover configuration

[amalmichaelvj]

Dear team,

I have 2 Cisco ASA 5515.And i going for a Failover configuration...Can i load balance the two asa?

Can i share my lan traffic on both ASA.

My Lan network consist of only Single Vlan.All traffic is in single vlan

NO dMZ ZONE...

What should i prefer active/active or active/passive??

Can my both asa work with equal load

[Karsten Iwen]

With traditional Failover (active/passive) only one device works and the other is completely standby. If one device can handle the load then you should use this deployment as it's the easiest and most features are supported.

You can also use active/active but it's more complex to setup and manage. You split your ASA in two logical firewalls and it's your responsibility to distribute the traffic evenly on both logical ASAs.

You can also use the new cluster-feature which can give you the best load-sharing, but it doesn't support all features.