ASA Anyconnect failover across multiple sites

[carl_townshend]

Hi All

I am looking to deploy another ASA into another Geographical site, this will be used for a backup connection.

What is the best way to get the VPN clients to connect to this backup data center?

Could we use AWS route 53 for the dns name and then put the backup site as 2nd preference if the first fails? would this work ok?

Or are there any other things you could do?

cheers

[Rob Ingram]

Configure the backup server list in AnyConnect, this will automatically failover to the ASA in the other site if the primary is down.

[carl_townshend]

How do we do that ? any info pls?

[Rob Ingram]

@carl_townshend 

Use AnyConnect Profile editor to configure profile and configure as example below

[balaji.bandi]

Can you setup ASA  between DC to be HA  Active / Standby, so it seamless for VPN users ?

[carl_townshend]

They are on different geographical sites with no L2 tunnelling in place etc, as well as both public IP block will be different.