Two firewalls, active <> active, one located in one data center at one
physical location, the other is located in another data center at another
physical location. This arrangement is for disaster recover purposes and to
save money (1 pair instead of 2 pairs of firewalls). There are two of the same
service provider connections at each location.
Is there a Cisco technology that allows STATEFUL load-balancing between
these two separated firewalls WITHOUT the requirement of a layer 2 span
between their inside interfaces?
Put another way: is there such a thing as Layer 3 Failover for Cisco
* The initial positioning would have these two firewall's respective
locations in these two different data centers and so would have them located on
different IP subnets.
** I am aware of load-balancing options for traffic prior to that traffic
reaching the inside interface of these two firewalls (CSS, GSLB, CSM, 3rd
party LB's) but a firewall failure using inside LB to move traffic back and
forth between the two I don't believe would be stateful (from the FW's perspective) and
that is a requirement in this case.