Implementation of ASA to replace Checkpoint

[mburguk1000]

I need some product advice the ASA 5510 which we are looking at to replace checkpoint Nokia IP260 clustered using VRRP

1) Does the ASA support auatomatic fail over if one of nodes in a cluster fails ?

2) We currently have ISP redundancy with checkpoint, does the Asa support that and is failover dynamic or a manual process ?

Any information will bve greatly appreicated

Thanks

[abinjola]

yes..failover is supported with some restrictions..hope this helps

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/failover.html

[Panos Kampanakis · Accepted solution]

To answer your questions

1) Yes. The units monitor themselves and whoever is healthier is taking care of the traffic and they can failover between each other automatically.

2) Yes the ASA supports ISP redundancy and it is called route tracking.http://www.cisco.com/en/US/products/hw/routers/index.html

I hope it helps.

PK