I participated in a discussion about a High Availability feature on Cisco ASA and FortiGate. We were talking about active-active, active-passive and active-standby modes. What was funny, we talked about the same features using different names. Yes, Cisco and Fortinet, they use different names for the same features. Let me explain it to avoid similar misunderstanding. 1) Cisco ASA They are two modes available: a) active/standby - the method is available only in standalone mode. The concept is simple: you have two devices: a primary and a secondary. When it possible the primary is an active device and the secondary a standby. Only one device (active) processes traffic and the standby waits passively, monitoring the status of the active one. When failure happens (failure of the device, an interface, etc.), it triggers a fail-over and the secondary (standby) becomes the active one (secondary/active). b) active/active - this mode is only available in multi-context mode. Y