What do Jurassic Park and ASA's have in common? You've got to have redundancy! Cisco ASA firewalls provide several options for High Availability: * active/standby failover * active/active failover * clustering Each has their strengths and weaknesses. Active standby failover uses two ASA's. One will actively pass traffic, and one will be passive. This is easy to configure, but only one ASA does the work. Active/Active is also a two-node solution. This uses multiple context mode (AKA multi-mode) to allow both ASA's to pass traffic. This is easy but comes with some drawbacks. ASA clustering can use many active nodes, without the need for contexts. It's a bit more complicated to implement. HA can be configured on the ASDM or the command line. Although not covered here, Firepower and Threat Defence (AKA FTD) also have HA options. I wanted to call this "Cisco ASA Failover and High Availability Concepts Explained", but I think the title is a bit too long :) I also recommend watching: Cisco ASA Firewall | Multi mode (Contexts) https://www.youtube.com/watch?v=3UihGMh357I Cisco ASA Firewall | Clustering https://www.youtube.com/watch?v=5cZ8D3T2ZAA LET'S CONNECT 🌏 null 🌏 https://twitter.com/NetwrkDirection 🌏 https://www.patreon.com/NetworkDirection 🌏 https://www.facebook.com/networkdirection 🌏 https://www.networkdirection.net/ Helps with: CCNA Security, 210-206, IINS CCNP Security, 300-206, SENSS