Having looked at the specifications for the ASA-5520 on this page here (http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_data_sheet0900aecd802930c5.html) I have the following key facts:
ASA 5520 Firewall Throughput: Up to 450Mbps
Maximum Firewall and IPS Throughput (SSM-20): Up to 375Mbps
If I were to run two ASA-5520s as a failover pair, and also load balance between them, would the maximum throughput potentially be 900Mbps (750Mbps with IPS)?
We are currently running an Active/Standby configuration between two 1Gbps LAN environments. However the firewall has become a bottleneck. If we were to upgrade this to an Active/Active configuration we believe this would give us much better throughput.
What load balancing methodologies would people advise?
Thanks in Advance
You can have the exact rules, however, you can't have the exact same subnet/interfaces.
Those 2 contexts (Context-A and Context-B) needs to be virtually a separate FW unfortunately. That's why I said, it's not load balancing traffic.