CCNP Security Firewall 642-617 Quick Reference

Section 6. ASA High Availability

This section looks at configuring the ASA for high availability. Due to the nature of the ASA, a single deployment can be also considered a single point of failure. A failure of the ASA would either prevent access to resources that the ASA is protecting or would prevent internal users from accessing an external resource such as the Internet.

Although many smaller organizations take this risk, the ASA does support virtualization and high availability demanded by larger enterprises and provides fault tolerance if a link or device failure of the ASA occurs.

ASA Failover

Failover provides redundancy for the ASA if hardware of software failure occurs. The ASA supports two types of failover:

• Hardware failure

• Stateful ...