ASA Remote Access Vpn in multiple interfaces

[LuigiDiFronzo9542]

Hello,

I have a remote SSL vpn access called SSL_VPN with an ISP provider ISP-01, connected to the outside interface out-ISP-01. I have another ISP provider ISP-02, connected to the outside interface out-ISP-02.

How is the procedure to asociate the remote vpn SSL_VPN to access both the out-ISP-01 interface and out-ISP-02 interface?. 

Thanks.

[balaji.bandi]

not implemented by me, but check below :

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/68328-remotevpn-loadbal-asa.html

https://www.youtube.com/watch?v=ha4UqZZK74k

[LuigiDiFronzo9542]

Thanks for the information Balaji,

However, I think there is some confusion. In mi case I don't have 2 devices ASA.

I only have 1 device ASA with 2 outside interfaces, and I'd like have 2 different ways to access through anyconnect via provider ISP-01, connected to the outside interface out-ISP-01 and via provider ISP-02, connected to the outside interface out-ISP-02.

Thanks.

[Rob Ingram]

@LuigiDiFronzo9542

You cannot have 2 active ISPs for remote access.

You could enable IP SLA and track the first ISP, if that goes down failover to the second ISP - here is an example.

You'd have to enable webvpn/ipsec on the second interface and define a backup peer in the anyconnect profile of the client.