How to block access to secondary Firewall

Posted on 2011-10-04
Last Modified: 2012-05-12
I have two firewalls in a pair : a Master & a secondary.

How do I block access to the secondary? I mean I want to make changes only to primary & for security reasons access to secondary should be blocked. How do I do that?

I am using a pair of ASA 5510 Firewalls!

Question by:CCIE_Universe
    LVL 35

    Accepted Solution

    Afaik you can't due to the nature of the failover (assuming you have a failover bundle). The secondary needs to be reachable to keep in synch. And I assume you are one of a few people that can access it? So that wouldn't be too big a problem, would it?
    And even if you make changes to the secondary by accident, it should prompt you about that.

    Author Closing Comment

    Hi Ernie,

    Thanks for your comments............ I had a call with Cisco TAC & they said that it was normal.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    6 Surprising Benefits of Threat Intelligence

    All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

    Article by: IanTh
    Hi Guys After a whole weekend getting wake on lan over the internet working, I thought I would share the experience. Your firewall has to have a port forward for port 9 udp to your local broadcast x.x.x.255 but if that doesnt work, do it to a …
    ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    758 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now