×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

method to automate configuration updates to redundant WSA

Answered Question
Jul 26th, 2013
User Badges:

is there a way to have our current Ironport configuration automatically load onto a 'backup' Ironport device?  Both are physical devices; one is production, the other is at our DR hot site.  Ideally, any changes (custom URL categories, bypass lists, etc) made will automatically be pushed to the configuration of the second device.  Like a primary/failover. Is there a way to do this, other than manually importing and uploading the config file on a very regular basis?


If not, any other ideas for how to accomplish this?     

Correct Answer by Ken Stieers about 4 years 3 weeks ago

Generally that's done using the Secuity Managment Appliance, where you do the config on the management appliance and push it out to all of your WSA's.  The SMA will also centralize reporting, so you don't have to dig through multiple appliances... But it is an added expense...


Your other option is to script it yourself...

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Ken Stieers Fri, 07/26/2013 - 10:22
User Badges:
  • Gold, 750 points or more

Generally that's done using the Secuity Managment Appliance, where you do the config on the management appliance and push it out to all of your WSA's.  The SMA will also centralize reporting, so you don't have to dig through multiple appliances... But it is an added expense...


Your other option is to script it yourself...

Michael Cole Fri, 08/02/2013 - 07:46
User Badges:

Ken,


Thanks for responding...  that's what I was afraid of.  :s  We have a m170 that I just powered back on and am trying to get configured correctly; we haven't had much success utilizing it (2 have been RMA'd and this was was shut down for a reason, but before I got here.) 

Actions

This Discussion