High Availability on SecurePackets

Active-Standby Failover

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Active/Standby is the simplest ASA failover mode. One unit actively processes traffic while the standby unit monitors and takes over if the active unit fails. Both units share the same configuration, and the standby unit does not pass traffic under normal operation.

Active/Active Failover

Mon, 01 Jan 0001 00:00:00 +0000

Overview

Active/Active failover allows both ASA units to process traffic simultaneously by leveraging multiple security contexts. Each failover group (containing one or more contexts) can be assigned as active on a different unit, distributing the traffic load across both firewalls.

Clustering

Mon, 01 Jan 0001 00:00:00 +0000

Overview

ASA clustering allows multiple ASA units to operate as a single logical firewall, providing both increased throughput and high availability. In spanned EtherChannel mode, port-channels span across all cluster members, with upstream and downstream switches seeing a single logical link.