NO, the failover cable is what makes failover possible. The cable is configured so that one end connects specifically to the failover PIX and one end connects to the Master PIX. When you plug in the secondary PIX it automatically downloads a copy of the config. You can add an aditional cable called a "stateful" failover cable. This allows failover without dropping connections. I once dialed up to an external ISP, made a VPN connection to our PIX, walked back to the wiring room and pulled the plug on the main PIX firewall. The VPN connection stayed up... didn't miss a beat. Now that is a nice feature!
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...