Cisco ASA Policy-Based Routing for branch office to internet

[curcloin]

I have a new branch office with an internet connection and a P2P/MOE back to our main office.  I want the internet traffic at the branch to go out our internet connection at the branch but also use the main office internet as a backup.  Is something like this possible with an ASA 5508x?

[Francesco Molino · Accepted solution]

Hi

Default route will be your local isp and in case this link is down default route must the second line through your main office, am i getting it right?

If so, you don't need pbr, using tracking will be simpler.
Here a guidance document on how to implement that:
https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/118962-configure-asa-00.html

If you need help to build your specific config, let me know

[Karsten Iwen]

As already mentioned by Francesco, this can be handled by routing. But the connection to the main-office needs to be able to handle the traffic for the internet.  That can be tricky if it is a kind of VPN-connection.