[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1534
  • Last Modified:

Cisco, ASA, 5510, Failover to a Cisco ASA 5505

Can a Cisco ASA 5510 (ASA5510-SEC-BUN-K9) failover to a 5505 (ASA5505-SEC-BUN-K9)?

I know there are 25 vs 250 VPNs...which is fine.  I have the 5510 already, and I am looking to purchase another firewall.  I don't have the $$ for another 5510, but I can get the 5505.  As for the performance differences, that is fine.  Basically I am wanting to ensure failover for non-VPN related business (e-mail, FTP, etc...).

Thanks,
Kevin
0
kevin_buchanan
Asked:
kevin_buchanan
2 Solutions
 
devangshroffCommented:
this is npt possible , to have a failover you need to go for same product , eve with same firmware , RAM etc.
0
 
PugglewuggleCommented:
When designing a failover configuration with both ASAs and Cisco routers, you must use an identical product. It will not work unless the two devices are exactly the same.
For best reliablilty get another 5510. The 5505s (even with the security plus license) only have stateless A/S failover. This means that if one ASA goes down, ALL connections are dropped and everything has to be resestablished - in otherwords it kills everything on the network for about 30 seconds.
With 2 5510s in A/S or A/A failover mode, you have full stateful failover, which means that if an ASA drops all connections are seamlessly transferred over to the remaining ASA and when the other one is fixed everything goes back to normal operation.
Please note that ASAs are VERY reliable (although I certainly cannot blame you for wanting a backup unit! - It's best practice to do this). You would probably be okay if you got one 5510 now and waited for the new budget year to get the second one and then installed them in failover mode.
Cheers! Let me know if you have any questions!
0
 
kevin_buchananAuthor Commented:
devangshroff - your answer was good
Pugglewuggle - your was more informative and informational

thanks to both of you!  I will wait until next FY and budget for another 5510.  ...thanks!
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now