I was looking at SPAN/RSPAN feature and I have implemented it before but what I wanted to do in this scenario is SPAN ASA1 to WSA T1 and RSPAN ASA2 through the trunk to WSA T1, so in case of failover the traffic is still monitored by WSA without manual intervention.
Then I saw the following restriction in the config guide:
Destination Port: It can participate in only one SPAN session at a time (a destination port in one SPAN session cannot be a destination port for a second SPAN session).
So my config wouldn't work.
Then I thought of using T2 on SW2 but it seems that it is used differently (1 for tx traffic, 1 for rx traffic) and this wouldn't work either.
Any ideas how I can do this?
What my config would look like (had it been supported):
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...