07-27-2013 11:35 PM
Hi,
I would like to deploy Cisco S170 Web Security Applicance in HA mode.
My question is; What license are avaiable to ensure two appliances work in HA mode?
We have purchased the following licenses and not sure if HA will work;
2 x WSA-S170-K9 WSA S170 Web Security Appliance with Software
250 x WSA-WSP-5Y-S2 Web Premium SW Bundle (WREP+WUC+AMAL) 5YR, 200-499 Users
There are 250 users in our network.
Solved! Go to Solution.
08-02-2013 08:44 AM
I'm not an expert on the licensing end, but as far as I know, there isn't a seperate license for HA of the WSA. From a technical standpoint, HA for the WSA is handled by how you get the traffic to the boxes. The WSA's don't know about one another, they don't get "clustered" like the ESA's...
08-02-2013 08:44 AM
I'm not an expert on the licensing end, but as far as I know, there isn't a seperate license for HA of the WSA. From a technical standpoint, HA for the WSA is handled by how you get the traffic to the boxes. The WSA's don't know about one another, they don't get "clustered" like the ESA's...
08-10-2013 08:05 AM
We've used an ACE or some other type of load balancer for HA.
03-21-2014 06:47 PM
08-13-2013 12:23 AM
HI,
WSA does not have the Clustering Capability. You can however load balance the traffic via WCCP (transparent proxy Deployment) or via PAC files (Explicit Proxy Mode).
Regards,
Kush
03-18-2014 05:19 AM
I have been going through Support community questions and I noticed your question, we have a setup were HA is achieved by using PAC file which is pushed to users.
HTH
05-25-2014 04:53 PM
We use netscalers to do an LDNS address sort of like GSLB, which monitors the proxy port, it is sort of a dynamic dns with a low TTL, if the proxy goes down it changes the return address to the alternate ip.. by doing this, we don't have to proxy through the netscaler and use X-FF...
09-30-2014 08:46 AM
Hello Edward,
Please, allow me to resurect this old post. What method of HA did you implement? According to this conversation, I clearly understand that WSA can not perform a cluster, so we need to load balance according to our WCCP configuration on the ASA.
Now, the question is about licensing. For example, if you did acquire 250 licenses, did you install 125 on WSA-1, and 125 on WSA-2???? Imagine that WSA-1 dies, now you just can use the 125 licenses from WSA-2???
Regards!
09-30-2014 08:59 AM
When you get the WSAs both boxes get the feature keys, but user count isn't tracked...
So when one fails, the boxes don't care that they're handling more... In a VM world you can create and license as many as you need...
09-30-2014 11:48 AM
Hi,
The licensing portal allows you to generate different licenses for the two appliances both for 250 users. From there, you use WCCP to load share.
11-03-2017 01:15 PM
Good day,
I would like to know if there is any document showing the step by step to perform load balancing and HA configuration between a WSA and vWSA through WCCP on a Cisco ASA Firewall.
On the other hand I have the doubt when this type of configuration is done as it is done so that when making some configuration change replicate in the two WSA (physical WSA and virtual vWSA).
Thank you in advance for the collaboration and help you give me.
02-23-2022 10:21 PM
Hi Guys,
What is the meaning of 200-499 Users for licenses?
Is that the number of concurrent users sessions or licensed user limitation?
Please advice.
02-24-2022 12:13 AM
yes up to 499 unique or concurrent users at a time.
02-24-2022 04:38 AM
02-24-2022 09:09 PM - edited 02-24-2022 09:10 PM
Thanks Balaji and Ken for your reply.
Is there any way that we can check the current utilization of those concurrent users out of 499?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide