ASA multi context

[NAVIN PARWAL]

Folks,

I have a customer who would like to know how multicontext feature of the ASA can benifit him organization.

I know he can do active/active failover configuration, but how would that work, he wants to know in a very simple language.

Would he be load balancing between the 2 firewalls? will the configuration change on his switches, right now he has 2 pix 515 failover running 6.3.

What aspects do he need to consider when looking for the active/active feature, will this feature give me something more than he already has?

I will surely rate this post.

[nkhawaja]

Multicontext configuration can give him another advantage. He can run run two or more separate logical firewalls on the one firewall box. It means you can segregate your networks and apply a different firewall on each one. Each firewall can have its own policies.

yes switch configuration is needed to be changed in terms of providing separate vlans.

in terms of active active failover, you can take advantage of both firewalls being in working state, but there are several considerations and design scenarios

e.g. each firewall will serve its own networks / subnets

see if you can access this module

http://www.cisco.com/E-Learning/bulk/public/celc/Cisco_QLM6_ASA_beta/course_skin.html

check this link out

http://www.cisco.com/en/US/partner/products/ps6120/products_configuration_guide_chapter09186a008045247e.html#wp1052847

thanks

Nadeem