Anyconnect VPN on ASA with FTD running parallel

[MehnazKhan2492]

Hi, 

Just seeking some help and guidance as we are running RA VPN on ASA 5512 with users authenticated via ISE posturing policies, we prefer to build a parallel FTD so for now ASA and FTD will be running parallel for same RA VPN.

Slowly and steadily we will move all the users to new FTD appliances, are there any recommendation steps to avoid any outage while both firewalls are running parallel.

Regards,

Mehnaz

[Sheraz.Salim]

ASA is on different public ip address/different cert presesented to client and for FTD is also on different subnet/different ip address. as long as the clinet is landing on different firewall and client authenticate from ISE you should be fine.

here are few link might find you interesting.

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215236-ise-posture-over-anyconnect-remote-acces.html