Cisco ASA Series Configuration Manual page 65

Chapter 5 Identity Firewall
Figure 5-2
AD Server
The following figure shows how you can deploy the Identity Firewall components to support redundancy.
Scenario 1 shows a deployment with multiple Active Directory servers and a single AD Agent installed
on a separate Windows server. Scenario 2 shows a deployment with multiple Active Directory servers
and multiple AD Agents installed on separate Windows servers.
Figure 5-3
AD Server
AD Server
The following figure shows how all Identity Firewall components—Active Directory server, the AD
Agent, and the clients—are installed and communicate on the LAN.
Deployment Scenario without Redundancy
Scenario 1
AD Agent
AD Server
AD Agent
ASA
Deployment Scenario with Redundant Components
Scenario 1
AD Agent AD Server
ASA AD Server
Scenario 2
ASA
Scenario 2
AD Agent
ASA
Cisco ASA Series Firewall CLI Configuration Guide
About the Identity Firewall
5-5