5-5
Cisco ASA Series Firewall CLI Configuration Guide
Chapter 5 Identity Firewall
About the Identity Firewall
Figure 5-2 Deployment Scenario without Redundancy
The following figure shows how you can deploy the Identity Firewall components to support redundancy.
Scenario 1 shows a deployment with multiple Active Directory servers and a single AD Agent installed
on a separate Windows server. Scenario 2 shows a deployment with multiple Active Directory servers
and multiple AD Agents installed on separate Windows servers.
Figure 5-3 Deployment Scenario with Redundant Components
The following figure shows how all Identity Firewall components—Active Directory server, the AD
Agent, and the clients—are installed and communicate on the LAN.
ASAAD Server
AD Agent
304005
Scenario 1 Scenario 2
ASAAD Server
AD Agent
ASA
AD Server
AD Server
AD Agent
304004
Scenario 1 Scenario 2
ASA
AD Server
AD Server
AD Agent