• With active/standby failover, only one security appliance actively processes user traffic while the other unit acts as a hot standby, and is prepared to take over if the active unit fails.
• With active/active failover, both units can actively process firewall traffic while at the same time serving as a back up for their peer unit.
• With stateful failover, connection status is tracked and relayed between security appliances. During stateful failover, connections remain active. With stateful failover disabled, connections are dropped.
• The configuration of the primary security appliance is replicated to the secondary security appliance during configuration replication.
© 2005 Cisco Systems, Inc. All rights reserved. SNPA V4.0—16-44
Was this article helpful?