Two ASA redundant design

[Johan Olsson]

Hi,
I have a design question that I would like to know how to do.

I have two server rooms in two locations with a rented 1Gbit connection between. I'm using it as a "tunk" and have access to all vlan/subnets on each location.
Each server room  has its own internet connection, ASA, switch and servers. I'm only using the connection between to sync backup/replication of servers.
In each ASA I have a license for two context.

I had an idea to run a primary virtual ASA at each location, then a secondary virtual standby ASA on the other location.
But what i'm worried about is that if there is an interruption on the connection between the server rooms the firewalls will switch Active to Standby and it will break the internet Connection for both server rooms.
I only want to switch Active to standby if a firewall goes down. Not if the Connection between the firewalls are interupted.

Is this possible to configure?

Thanks for any advice
 

[Vibhor Amrodia · Accepted solution]

Hi,

Check these recommendations and i think this should answer your query:-

http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/ha_overview.html#wp1077563

Thanks and Regards,

Vibhor Amrodia

[Johan Olsson]

Vibhor, thank you.

That was all info I needed.