cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
587
Views
0
Helpful
2
Replies
Highlighted
Beginner

Healh Check on WSA

Hi Guys,

 

I am new in WSA.  I would like to ask for your advise on WSA healcheck.  Usually what info do we capture for the healthcheck?  Are all capture from GUI or some from Cli?  If from Cli, is there any command?

 

And also check on the failover.  The WSA is running on VIP with 2 physical appliance, how can we test the failover?

1. how can we determine the current active unit?

2. if we have physical access, can we just simply unplug the network cable from the active unit (Primary unit)? if yes, how soon the standby unit become active?

3. After testing, can we just simply plug back the network cable? Will the original primary unit become active or the secondary will remain active? 

4.  What if we do not have physical access, is there any method to test on the failover?

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

Hi there,

 

For a general proxy health check you can use:

1. CLI -> proxystat 

2. GUI -> Reporting -> System Status

 

With regards to failover:

1. GUI -> Network -> High Availability -> Latest Status or CLI -> failoverconfig

2. Yes, but that's a radical way to test fail-over. It depends on the advertising interval you set in the high availability group (by default 3 sec). Backup unit should take over after 3 missed advertisements from the MASTER

3. It depends on preemptive settings. If preemptive is enabled the MASTER will take over once it comes online.

4. CLI -> failoverconfig -> testfailovergroup

 

Please vore if you find it helpful

View solution in original post

2 REPLIES 2
Highlighted
Cisco Employee

Hi there,

 

For a general proxy health check you can use:

1. CLI -> proxystat 

2. GUI -> Reporting -> System Status

 

With regards to failover:

1. GUI -> Network -> High Availability -> Latest Status or CLI -> failoverconfig

2. Yes, but that's a radical way to test fail-over. It depends on the advertising interval you set in the high availability group (by default 3 sec). Backup unit should take over after 3 missed advertisements from the MASTER

3. It depends on preemptive settings. If preemptive is enabled the MASTER will take over once it comes online.

4. CLI -> failoverconfig -> testfailovergroup

 

Please vore if you find it helpful

View solution in original post

Highlighted

Hi

 

Thanks for the recommendation.

This widget could not be displayed.