[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 535
  • Last Modified:

Alternative to buying and implementing a third Cisco ASA for failover.

Hi,
We are currently looking at implementing a PIX to ASA upgrade on our network. There are two ISL's in place (alternate provider) and will connect to the new ASA's individually. We also require a failover mechanism between both firwalls and an active connection from both to the
our DR site. The option currently being looked at is to implement a third ASA. The DR site is firewalled and if third ASA is not put in place there will only be a link from the DR site to one local firewall. This will not satifsfy failover requirements as if the firewall linked to DR goes down, how will fail over take place? Are there other options available apart from third firewall, hardware must be cisco. Thanks in advance.
0
Joz05
Asked:
Joz05
1 Solution
 
mpickreignCommented:
If I am understanding you correctly. You should be able to do this with two ASA 5510s (or above).

The ASA5510 and above will handle multiple internet connections and can be configured to automatically switch if on connection goes down.  I would configure one ASA with both internet connections and the connection to the DR, then configure the second ASA as a hot-standby in the event of hardware failure.
0
 
Joz05Author Commented:
Thanks
0

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now