ProxySG & Advanced Secure Gateway

 View Only
  • 1.  Proxy ASG - Active Standby Failover

    Posted Jan 18, 2019 10:53 PM

    Hi All,

    In my setup Proxy has 2 legs . One for internal users to reach proxy and other leg  for proxy to reach internet.  Failover group configured for ingress link ( leg 1). 

    Fail over working fine incase of any network failure for leg 1. How we can achive the fail over in case of any failure on leg 2 ( upstream link for Proxy to reach internet) ??

    Thanks in Advance..



  • 2.  RE: Proxy ASG - Active Standby Failover

    Posted Jan 20, 2019 10:13 PM
    Dear Sriram, You should have 2 firewalls with their VIP as the default gateway.


  • 3.  RE: Proxy ASG - Active Standby Failover
    Best Answer

    Posted Jan 21, 2019 05:29 AM

    Hi Sriram,

     

        It would be difficult to trigger a failover based on the internet reachability as the Failover mechanism in proxy works based on the reachability of one device from other. In this use case, we can’t have a failover but can use Health Check based forwarding to the other proxy via the leg one which might help. You can refer the article https://support.symantec.com/en_US/article.TECH245667.html for having a rough idea on how it should be planed. The article created for having 2 locations high-Availability but can be converted to suite your requirements.