Active/standby failover

Active/standby failover is a high availability configuration that

  • lets you use a standby Firewall Threat Defense device to take over the functionality of a failed unit,

  • enables the standby unit to become the active unit when the active unit fails, and

  • allows the failed unit to come back online as the standby unit if the problem is temporary.

The failed unit must be replaced if the problem is not temporary. Set the standby unit to primary before replacing the failed unit to retain the configuration of the secondary unit.

For multiple context mode, the ASA can fail over the entire unit (including all contexts) but cannot fail over individual contexts separately.