Cisco ASA Series Configuration Guide

5-5
Cisco ASA Series Firewall CLI Configuration Guide
Chapter 5 Identity Firewall
About the Identity Firewall
Figure 5-2 Deployment Scenario without Redundancy
The following figure shows how you can deploy the Identity Firewall components to support redundancy.
Scenario 1 shows a deployment with multiple Active Directory servers and a single AD Agent installed
on a separate Windows server. Scenario 2 shows a deployment with multiple Active Directory servers
and multiple AD Agents installed on separate Windows servers.
Figure 5-3 Deployment Scenario with Redundant Components
The following figure shows how all Identity Firewall components—Active Directory server, the AD
Agent, and the clients—are installed and communicate on the LAN.
ASAAD Server
AD Agent
304005
Scenario 1 Scenario 2
ASAAD Server
AD Agent
ASA
AD Server
AD Server
AD Agent
304004
Scenario 1 Scenario 2
ASA
AD Server
AD Server
AD Agent

Cisco ASA Series Specifications

General

Model	ASA 5505
Interfaces	Varies by model (Fast Ethernet, Gigabit Ethernet, 10 Gigabit Ethernet, etc.)
High Availability	Active/Standby or Active/Active (varies by model)
Power Supply	Varies by model
Form Factor	Varies by model
Operating System	Cisco ASA Software
IPsec VPN	Supported
SSL VPN	Supported
IPS Throughput	Varies by model