Hi Sebastan,The way it works is:At boot, the Secondary PIX only requires the minimum configuration to communicate with the Primary. As the secondary comes on line, it sends failover hello packets, the two communicate and then sync. After synchronisin...

Hi Sebastan,There's a little gotcha with lan based failover. Unlike serial based failover where the secondary pix doesn't require any configuration to be sync'd with the primary and has the config pushed to it, lan based requires at least a minimal c...

Hi,Configure outside ACL on router to allow you to SSH to it then remove crypto map. restore ACL when reconfiguration complete.Cheers,Paul.

Can you confirm that you are using the "copy tftp flash:pdm" command instead of just "copy tftp flash"?Cheers,Paul;

Hi,Try the revised config attached.You will not be able to ping from outside as it is using port redirection but should be able to ping from inside as well as browse and telnet from outside.Cheers,Paul