A network engineer is planning on replacing an Active/Standby pair of physical Cisco Secure Firewall ASAs with a pair of Cisco Secure Firewall Threat Defense Virtual appliances. Which two virtual envi

The correct answer is A. ESXi D. KVM. Cisco FTDv (Firewall Threat Defense Virtual) supports traditional Active/Standby High Availability only on VMware ESXi (A) and KVM (D). Cloud platforms such as AWS (E) and Azure (B) do not support the traditional stateful failover HA model used by physical ASAs; instead, they rel

Deployment

Question

A network engineer is planning on replacing an Active/Standby pair of physical Cisco Secure Firewall ASAs with a pair of Cisco Secure Firewall Threat Defense Virtual appliances. Which two virtual environments support the current High Availability configuration? (Choose two.)

Options

AESXi
BAzure
COpenstack
DKVM
EAWS

How the community answered

(62 responses)

A
95% (59)
C
3% (2)
E
2% (1)

Explanation

Cisco FTDv (Firewall Threat Defense Virtual) supports traditional Active/Standby High Availability only on VMware ESXi (A) and KVM (D). Cloud platforms such as AWS (E) and Azure (B) do not support the traditional stateful failover HA model used by physical ASAs; instead, they rely on cloud-native redundancy mechanisms (e.g., Elastic IP reassignment or load balancers). OpenStack (C) is also not supported for FTDv Active/Standby HA. When replacing a physical ASA HA pair, the on-premises hypervisors ESXi and KVM are the only supported targets that preserve the same HA model.

Topics

#Cisco FTD Virtual#High Availability#Virtualization Platforms#Platform Compatibility

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice