A modification of the Resilient design where instead of a single IPS directly connected to each firewall, we used a cluster of IPS boxes connected to both the active and standby firewalls. The advantage of this design is that while ASA is active standby, the firewall pushes all the traffic through a fully stateful cluster that is independently scalable and fault tolerant.
http://cs.co/60558aH9N
Duration: 6:2
Publisher: Cisco
You can watch this video also at the source.
