Solved

Alternative to buying and implementing a third Cisco ASA for failover.

Posted on 2010-09-09
2
512 Views
Last Modified: 2012-05-10
Hi,
We are currently looking at implementing a PIX to ASA upgrade on our network. There are two ISL's in place (alternate provider) and will connect to the new ASA's individually. We also require a failover mechanism between both firwalls and an active connection from both to the
our DR site. The option currently being looked at is to implement a third ASA. The DR site is firewalled and if third ASA is not put in place there will only be a link from the DR site to one local firewall. This will not satifsfy failover requirements as if the firewall linked to DR goes down, how will fail over take place? Are there other options available apart from third firewall, hardware must be cisco. Thanks in advance.
0
Comment
Question by:Joz05
2 Comments
 
LVL 4

Accepted Solution

by:
mpickreign earned 500 total points
ID: 33637249
If I am understanding you correctly. You should be able to do this with two ASA 5510s (or above).

The ASA5510 and above will handle multiple internet connections and can be configured to automatically switch if on connection goes down.  I would configure one ASA with both internet connections and the connection to the DR, then configure the second ASA as a hot-standby in the event of hardware failure.
0
 

Author Closing Comment

by:Joz05
ID: 33637451
Thanks
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

In this tutorial I will show you with short command examples how to obtain a packet footprint of all traffic flowing thru your Juniper device running ScreenOS. I do not know the exact firmware requirement, but I think the fprofile command is availab…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now