Hi, I'm trying to find out if it's possible to use an ASA to route traffic primarily (in clear text) via an MPLS link (on a dedicated interface) and, in the event of failure of that link, failover to a internet based VPN.
I'm aware that we can use track statements to modify the routing, but as of right now I'm not convinced that it's possible to change the behaviour based on those statements. As far as I can tell as soon as we define an ACL with the relevant source destination the traffic will always have to be encrypted - and this is something that we don't want for performance reasons.
Any help would be appreciated.
