topic Inline PA vwire on inside interface of Cisco ASA HA/pair inline in General Topics https://live.paloaltonetworks.com/t5/general-topics/inline-pa-vwire-on-inside-interface-of-cisco-asa-ha-pair-inline/m-p/3675#M2712 <HTML><HEAD></HEAD><BODY><P>I am currently running a pair of Cisco ASA 5520 in HA.&nbsp;&nbsp; I want to protect the traffic going inside with an inline wire on the inside interface of Cisco ASA HA/pair as it travels to the LAN.&nbsp; A pair PA-2020 are configured in Active/Standby with the wire trust/untrust pairs running inline after the ASA HA pair.&nbsp; Untrust zone going to the ASA and trust zone going into the LAN.&nbsp; The PA standby Passive Link State is set to Auto however the Cisco ASA is not seeing the inside heartbeat traffic on the standby unit come up.&nbsp; Is this because the standby unit is not passing traffic?&nbsp; Should I configure the PA pair as an Active/Active pair where both vwire config and policies are passing traffic? </P></BODY></HTML> Thu, 17 Apr 2014 18:02:05 GMT mpitogo 2014-04-17T18:02:05Z Inline PA vwire on inside interface of Cisco ASA HA/pair inline https://live.paloaltonetworks.com/t5/general-topics/inline-pa-vwire-on-inside-interface-of-cisco-asa-ha-pair-inline/m-p/3675#M2712 <HTML><HEAD></HEAD><BODY><P>I am currently running a pair of Cisco ASA 5520 in HA.&nbsp;&nbsp; I want to protect the traffic going inside with an inline wire on the inside interface of Cisco ASA HA/pair as it travels to the LAN.&nbsp; A pair PA-2020 are configured in Active/Standby with the wire trust/untrust pairs running inline after the ASA HA pair.&nbsp; Untrust zone going to the ASA and trust zone going into the LAN.&nbsp; The PA standby Passive Link State is set to Auto however the Cisco ASA is not seeing the inside heartbeat traffic on the standby unit come up.&nbsp; Is this because the standby unit is not passing traffic?&nbsp; Should I configure the PA pair as an Active/Active pair where both vwire config and policies are passing traffic? </P></BODY></HTML> Thu, 17 Apr 2014 18:02:05 GMT https://live.paloaltonetworks.com/t5/general-topics/inline-pa-vwire-on-inside-interface-of-cisco-asa-ha-pair-inline/m-p/3675#M2712 mpitogo 2014-04-17T18:02:05Z Re: Inline PA vwire on inside interface of Cisco ASA HA/pair inline https://live.paloaltonetworks.com/t5/general-topics/inline-pa-vwire-on-inside-interface-of-cisco-asa-ha-pair-inline/m-p/3676#M2713 <HTML><HEAD></HEAD><BODY><P>Think I found it, Active/Active HA vwire.</P></BODY></HTML> Thu, 17 Apr 2014 19:14:43 GMT https://live.paloaltonetworks.com/t5/general-topics/inline-pa-vwire-on-inside-interface-of-cisco-asa-ha-pair-inline/m-p/3676#M2713 mpitogo 2014-04-17T19:14:43Z