NGFW Clustering Technology

Large enterprises always require their network security solutions to seamlessly scale up or down based on current business needs. A fully distributed forwarding plane of Cisco Firepower Threat Defense (FTD) and ASA clustering enables elastic high scalability for stateful inspection devices in terms of throughput, concurrent connections, and connection rates. A key benefit of clustering is the ability to work with a stateless external load-balancer and compensate for the inherent ingress flow asymmetry internally; this enables a cluster to deliver full threat-centric NGFW and NGIPS inspection of any transit flows. Learn more at cs.co/900581WsW.

[@ADAMSIVES]

Wow! You can write backwards really good!

[@dswope79]

Phenomenal overview as always Andrew!

[@dhruvsharma3359]

I am bit confused, so there can be multiple directors for multiple flows ? If yes, then how forwarder know which director to contact for certain request ?

[@josecolonii7742]

How does a packet pick the cluster member? If PC 1 gets member 1 in the cluster how do we decide that a packet from PC1 or even PC2 get to member 2 or 3 in the cluster? Are we doing load balancing on the cluster of some sort?