CCNP Security Exam Prep Question of the Week

Which of the following provide high availability and performance enhancements for VPN sessions?

  1. Stateful active/standby failover
  2. Global Access Control Lists
  3. Cluster load balancing
  4. Server load balancing


The correct answers are 1, 3, and 4.

With Stateful Active/Standby failover, VPN users do not have to reconnect or reauthenticate should the Active ASA fail. With Cluster Load balancing a group of ASAs will work cooperatively to share the VPN load. With Server Based Load Balancing a Cisco Application Control Engine (ACE) is installed in a Cisco 7600/6500 series device and is used as an SSL VPN front end to multiple ASA servers running in parallel.

In this article

Join the Conversation

1 comment

  1. ccnp security Reply

    These questions and answers really useful for the examination point of view.