Cisco ASA support for PBR

[wwright00]

Does anyone know if Cisco has the PBR feature road mapped for future IOS releases or if they are building in new feature sets to load balance 2 different ISP connections much like F5. It seems more and more customers are asking for all in one functionality from their NextGen firewalls and the ASA seems to fall short in this category.

[Marius Gunnerud]

As of right now, you can do PBR on the ASA when the ASA is in a cluster.  I am uncertain if there will be support for PBR or loadbalancing on a standalone ASA in the future.

http://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/ha_cluster.html#pgfId-1943033

--

Please remember to select a correct answer and rate helpful posts

[wwright00]

Hi Marius,

It looks like Cisco is building in a new ECMP (Equal Cost Multipathing) feature set in the 9.3.x IOS release which will allow the ability to load-balance on the edge when connected out to 2 separate ISP's via BGP.  This is still in beta testing at the moment so I'm not sure when it will be released but the good news is it's on the road map ;-)