Fail over between ASA's

[tom0000037]

Hello, 

I am currently trying to design a solution for the following example. I have two groups of Billing servers. A Primary group and a back up group. These groups are also in different locations, at each location I have an ASA 5508-X in front of them.  the servers will also be connect to 2960's. My question is how can I set up redundancy between the firewalls, so if one server were to fail, its back up counter part will take over. 

Thank you. 

[rvarelac]

Hi Tom, 

You can use failover Active/standby  based on your topology , but the switches must be interconnected. So if the ASA on location A goes down, the switch can redirect the traffic to location B.

Be advise the ASA must be licensed and running the same code and hardware model  to apply the failover config. Also both must be at the same physical location. 

Examples below:

Failover

http://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/77809-pixfailover.html

http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_general_config/ha_failover.html

Hope it helps

-Randy-

[tom0000037]

Thanks for the advice and the links to the cisco documentation Randy. I am going to read through that and try it out. I will keep you posted with results. 

Thanks again.