ASA5505 A/S with ISP Failover

[jose cortes]

Hi Everybody,

I was wandering if it possible the deploiment shown in the figure below.

The situation is:

Right now there is one ASA5505 that does Failover between the two ISPs using and SLA tracking.

I need add another ASA5505 in order to implement A/S failover for the Hardware but I'm not sure if the ISP failover is going to work witht the A/S deplyment.

Somebody could confirm if this scenario is valid??

Best Regards,

Jose

[Jennifer Halim · Accepted solution]

Yes, i don't see a reason why it wouldn't work. It will continue to work with SLA tracking as there is only 1 active IP Address that the ASA uses, and the same ip address follows the active firewall.

[jose cortes]

thanks Jennifer,  One last question: Does the ASA5505 (Security Plus) support A/S High Availability???  Best Regards,  Jose

[Jennifer Halim]

No, A/S failover is not supported on ASA5505.

Here is the doc for your reference:

http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html