Policy configuration Synchronization in Cisco WSA Virtual appliances HA.

[irshad.ahmed21]

1: We have a cluster of Cisco WSA Virtual appliances for HA. Does any one know how to keep the Policy configuration Synchronized in cluster.

2: Does this cluster provide load balancing of data traffic.

Appliance Version: C600v

AsyncOS: 10.0

[syeda3]

HA for WSA's is handled by the redirection method... eg WCCP, or PAC files, or a load balancer, etc.  I think most people doing this use WCCP.  The WSA's register with the router or firewall that they're there, and ready to take traffic, when one goes down, the router/fw sees that and just sends traffic to the remaining WSA.

Please see the below urls for more information.

http://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/118157-configure-wsa-00.html

http://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/118242-configure-wsa-00.html

http://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/117870-configure-wccp-00.html

http://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/118082-qanda-wsa-00.html

[Venkatesh Attuluri]

1. for configuration sync between WSA's use SMA . SMA can manage WSA and collect reporting data  from both WSA

2.when WCCP used and  When a WCCP client fails, the portion of the load handled by that client is automatically redistributed to the remaining WCCP clients in the service group.If no other WCCP clients are available in the service group, the service group is taken offline and packets are forwarded normally (fail open)

[andresmen598]

Good day,

I would like to know if there is any document showing the step by step to perform load balancing and HA configuration between a WSA and vWSA through WCCP on a Cisco ASA Firewall.

On the other hand I have the doubt when this type of configuration is done as it is done so that when making some configuration change replicate in the two WSA (physical WSA and virtual vWSA).

Thank you in advance for the collaboration and help you give me.