With Stateful failover the ASA maintains the connection table and replicates it to the standby ASA. In stateful failover the ASA sends updates to the standby unit whenever there is a change in the state table. In this mode it sends stateful updates over a dedicated link to the standby unit. So when the standby needs to become active it does not need to build any connection entires since all the entries already exists in its database. You can use the same physical interface for both failover control and stateful link updates.Refer URL
Yes you can use management interface for stateful failover on ASA. However, if you have a ASA-5510, make sure it has a "Security Plus" license. With "Security Plus" license only, you could use management interface for normal use.
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
