Cisco ASA Firewall | High Availability

What do Jurassic Park and ASA's have in common? You've got to have redundancy!

Cisco ASA firewalls provide several options for High Availability:
* active/standby failover
* active/active failover
* clustering

Each has their strengths and weaknesses.

Active standby failover uses two ASA's. One will actively pass traffic, and one will be passive. This is easy to configure, but only one ASA does the work.

Active/Active is also a two-node solution. This uses multiple context mode (AKA multi-mode) to allow both ASA's to pass traffic. This is easy but comes with some drawbacks.

ASA clustering can use many active nodes, without the need for contexts. It's a bit more complicated to implement.

HA can be configured on the ASDM or the command line. Although not covered here, Firepower and Threat Defence (AKA FTD) also have HA options.

I wanted to call this "Cisco ASA Failover and High Availability Concepts Explained", but I think the title is a bit too long :)



I also recommend watching:

Cisco ASA Firewall | Multi mode (Contexts)
   • Видео  

Cisco ASA Firewall | Clustering
   • ASA Firewalls | High Availability wit...  

LET'S CONNECT

🌏    / networkdirection  

🌏   / netwrkdirection  

🌏   / networkdirection  

🌏   / networkdirection  

🌏 https://www.networkdirection.net


Helps with:
CCNA Security, 210-206, IINS
CCNP Security, 300-206, SENSS