CCIE Security - ASA -Lab 10-ASA Active Active

Cisco ASA Active/Active failover provides high availability while allowing both firewalls to actively process traffic. Unlike Active/Standby mode, where only one unit handles traffic at a time, Active/Active mode enables load sharing between two ASAs by utilizing multiple failover groups.

This deployment is ideal for multi-context mode, ensuring redundancy and improved performance in high-traffic environments. Each firewall actively handles different sets of connections, enhancing fault tolerance while maintaining security policies and stateful failover capabilities.

Active/Active failover is commonly used in dynamic enterprise networks requiring scalability, minimal downtime, and optimized resource utilization.

You might also be interested in these labs:

• CCIE Security - VPN GRE-Based VPN
• CCIE Security - VPN IKEv2 Lan-2-Lan or Site-2-site VPN
• CCIE Security - VPN GRE VPN over IPSEC
• CCIE Security - VPN GETVPN
• CCIE Security - VPN FLEX VPN L2TPv3
• CCIE Security - VPN DMVPN Dual Hub
• CCIE Security - VPN Certificate DMVPN
• CCIE Security - VPN Certificate Based Site-2-Sites VPN
• CCIE Security - VPN ASA Site2site through ASA and router IKEV and Anyconnect VPN with multiple profiles

The default username and password for images used in this course is as follows, however you will hear new passwords during the course if the instructor changes the credentials: 

** For Cisco XRv you are asked for a username and password in the loading process. You can add any username and password other than admin, root, sysadmin and other reserved usernames. Go with something like Alex/cisco e.g.

Then when completely loaded, you can use cisco/cisco or admin/admin.

***For XRv9K Full image you are asked for a username and password in the loading process. You then login using the username and password that you set.