Firewall loadbalancing and fault tolerance

in a network that has more than one ASA firewall appliances, how do they create sort of Fault tolerance and/or load balancing between both appliances?

* if one appliance crashes, how is the traffic going to be routed to the other appliances
* if appliance 1 is heavily used how do we route traffic to appliance 2

Thanks
jskfanAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Kanti PrasadCommented:
Hi

 Firewalls, Load Balancers, Inspection/Detection Systems, SSL-Off loader and WAAS appliances inspect load and forward state-full traffic, which are implemented in a redundant fashion in active-standby or active-active mode for redundancy, scalability, full convergence and recovery of state-full traffic.

Since it flows in one-way symmetrical session, traffic flows through all devices will bounce between different paths to be in continuous availability mode.

Please refer the below links

http://consort.us.com/pdfs/Managed%20Security%20Solutions.pdf
http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Data_Center/VMDC/ASA_Cluster/ASA_Cluster/ASA_Cluster.html#wp1417739
0
jskfanAuthor Commented:
Thank you for your input


http://www.thegeekstuff.com/2011/09/cisco-asa-high-availability/
I checked the link above. it is explained in simple way but I am not sure if that's all it needs
0
Kanti PrasadCommented:
Hi

I am not sure of your entire setup but it is mandatory to assign ip address and have a set up primary and secondary firewall so that the secondary one becomes  automatically active.


user (www.url..) --connects through the  (Active) ASA - VPN -firewall

                                                                                                                 User load balancer to  Web\Application Serves to DB

                                                                       ( Passive )ASA - VPN -firewall

So if the active fails the passive ASA will become active and will connect to the servers and to the DB.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
jskfanAuthor Commented:
Thanks
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Cisco

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.