- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-08-2013 06:29 AM
Hello
Is it possible to build a cluster with two WebSecurity Appliances? Or at least synchronize the configuration?
Regards Marcel
Solved! Go to Solution.
- Labels:
-
Web Security
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-08-2013 08:03 AM
Hello:
Officially this is not supported out of the box, you need the Ironport M appliance to centralize and distributed the same config to the other WSA.
Since not always everything it's an absolute truth, there is a way using a linux box in the middle acting as an Ironport M that is able to register these changes and populate them to the rest of WSA, but this solution was built in house and work pretty well. The problem is that it's not supported by Cisco.
Regards
Francisco Rodriguez P.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-22-2016 11:38 PM
WSA cluster is only for data traffic. You still need SMA for centralized policy management.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-08-2013 08:03 AM
Hello:
Officially this is not supported out of the box, you need the Ironport M appliance to centralize and distributed the same config to the other WSA.
Since not always everything it's an absolute truth, there is a way using a linux box in the middle acting as an Ironport M that is able to register these changes and populate them to the rest of WSA, but this solution was built in house and work pretty well. The problem is that it's not supported by Cisco.
Regards
Francisco Rodriguez P.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-22-2016 11:19 PM
Hi Team,
Do we still require M-series to do the above, have read in the documentation about the master slave configuration of WSA appliances to do the policy synchronization.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-22-2016 11:38 PM
WSA cluster is only for data traffic. You still need SMA for centralized policy management.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-23-2016 12:29 AM
Hi Tao,
Thanks for the quick revert.
Does it require any specific version for the clustering to work, wanted to ensure that we are running the compatible version at customer end.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-23-2016 05:15 PM
WSA HA was introduced in WSA version 8.5.x. Please refer to the following release notes for more details. Hope it helps.
http://www.cisco.com/c/dam/en/us/td/docs/security/wsa/wsa8-5/WSA_8-5-x_Release_Notes.pdf
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-18-2018 12:19 AM
If we have a management appliance in the middle, what is the sort of clustering applicable in this scenario? Active/Active or Active/Standby?
