Firewall sync between datacentres

[Thomas McLean]

Chaps,

I have two data centres in HA mode - one active and one standby - if the active was to go offline due to a failure we would like the standby DC to take over as the active DC for the period of failure.

Now to do this we need to keep everything in sync - this includes the firewall rules - is there a way to replicate the firewall rules from DC 1 to DC 2 automagically? At the moment we plan to do this manually and would prefer it obviosuly if this could be done in such a way that we wouldn't have to do repetitive work.

Any help in this situation would be appreciated - i've done a wee diagram that reflects our setup in a simple mans head.

Thanks,

Thomas.

[andyjames]

Hi,

The high end models can be clustered for load balancing but you lose some functionality that you might still want to use.

There is the security manager that might be better suited as you can deploy global profiles across pairs so you only change the rule once and it changes at all locations - http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5739/ps6498/data_sheet_c78-727090.html

HTH, Andy.