Cisco Web Security High Availability

[sengjiunn]

Hi,

Understand that the Cisco WSA HA utilizing VRRP without using external load-balancer but it only supports explicit deployment only.

The thing I understand from the HA is it only support active-passive but not active-active. I need to know how true this statement is and need clarification like supporting documents from technical team.

Great thanks in advance!

[Atazazuddin Shaikh]

Enclosing quick video that provides details around it,

https://www.youtube.com/watch?v=V1Di9_GxUUA

Regards,

Zack

[sengjiunn]

Hi Zack,

Do you have any supporting documents like WSA High-Availability can works on its own without having to have external load-balancer?

Much appreciated that!

[Atazazuddin Shaikh]

Please review Chapter 2 page 45 for HA configuration.

http://www.cisco.com/c/dam/en/us/td/docs/security/wsa/wsa8-5/WSA_8-5-0_UserGuide.pdf

HA function will work without an external load-balancer, as long as both WSA connected to same switch or in case of virtual WSA both Appliance must be connected to same vSwitch or vdSwitch.

Please feel free to open a TAC case if you need assistant or having issue with the functionality we will be more than happy to help.

Regards,

Zack

[sadik.sener1]

Hi Atazazuddin Shaikh,

Is it possible to have active / active configuration with the builtin HA mechanism within WSA?

If not i am going to use an external LB in order to fully utilize both devices and offer a better performance.

Kind regars

Sadik