The active/active failover mechanism used on firewall devices leverages the virtual context feature. The best results are obtained when the two devices configured with active/active failover have an identical platform and operating system. The two firewalls must be connected with a failover state link and this can be accomplished in one of three ways:
- Single physical link: both the failover and stateful information are transmitted on this link
- Dual physical links: the failover information is exchanged on one interface and the stateful information (maintaining the TCP connection and translation rules) on another
- The content below this message is for members only.