Are there Cisco vendors in KE who will not ask a novice like me funny questions, or is it my amateurish knowledge that makes me feel this way?? I have the following output from one of the Cisco ASA I manage: <cut> Licensed features for this platform: Maximum Physical Interfaces : 8 VLANs : 3, DMZ Restricted Inside Hosts : Unlimited *Failover : Disabled* VPN-DES : Enabled VPN-3DES-AES : Enabled VPN Peers : 10 WebVPN Peers : 2 *Dual ISPs : Disabled* VLAN Trunk Ports : 0 This platform has a Base license. </cut> So, I have two Internet links which I'd like to terminate into the ASA (5505) and configure fail-over. From the little I've read, I require an enhanced license so that I can have the "Failover" and "Dual ISPs" features enabled, no? I have contacted a local vendor, who is telling me that <quote> Hi Odhiambo, The failover license is only applicable when you have two ASA appliance and you need High Availability on the appliance not links. If you have two internet links and you want to load balance, then you might need a Cisco router. </quote> Now, can someone tell me: 1. Why I'd need failover license for two ASA appliances? Wouldn't those just work independently, or does one ASA have to autosense that it's workmate lost the Internet link and thus ask it to "failover to me"? :-) 2. How do I enable those two features? I have two ISPs (DSL and SDSL). I'd like to terminate both on the ASA and let the device handle cases where one link goes down. 3. I think requiring a Cisco Router for my situation would be an overkill when I already have ASA. Am I just being an anti-nyita, guys? -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ "If you have nothing good to say about someone, just shut up!." -- Lucky Dube