Stateful Failover and WebVPN on 5510

Answered Question
Aug 13th, 2010

The ASA CLI guide for v8.2 notes several WebVPN features that are not supported with stateful failover: smart tunnels, port forwarding, plugins, etc. Are these features disabled entirely if stateful failover is enabled and stripped from the config, or does this simply mean that they will work but won't be stateful?

Using a pair of 5510s and v8.2.

I have this problem too.
0 votes
Correct Answer by Magnus Mortensen about 6 years 5 months ago

Ben,

     The configuration is supported with Stateful failover, but those features just are not 'stateful':

- A stateful failover does not retain smart tunnel connections. Users must reconnect following a failover.

- A stateful failover does not retain sessions established using plug-ins. Users must reconnect following a failover.

- A stateful failover does not retain sessions established using Application Access. Users must reconnect following a failover.

- Magnus

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Magnus Mortensen Fri, 08/13/2010 - 12:50

Ben,

     The configuration is supported with Stateful failover, but those features just are not 'stateful':

- A stateful failover does not retain smart tunnel connections. Users must reconnect following a failover.

- A stateful failover does not retain sessions established using plug-ins. Users must reconnect following a failover.

- A stateful failover does not retain sessions established using Application Access. Users must reconnect following a failover.

- Magnus

Actions

This Discussion