I cannot grasp how traffic decides to flow over which context at any one time. The ASR group makes sense for returning the traffic, but doesn't help me visualize the process. If I understand correctly, each interface pair (inside, outside, etc) has a failover group that contains the two contexts unique for that ASA. So, isn't the standby IP assigned failover interface also visible to the upstream router and appear to source outbound traffic? Aarrghh. I am am only glowing at 40 watts today and need some more light!
Thanks - Dave