URL Filtering and Security Intelligence

URL filtering and Security Intelligence configurations and information are synchronized between Cisco Defense Orchestrators in a high availability deployment. However, only the primary Cisco Defense Orchestrator downloads URL category and reputation data for updates to Security Intelligence feeds.

If the primary Cisco Defense Orchestrator fails, not only must you make sure that the secondary Cisco Defense Orchestrator can access the internet to update threat intelligence data, but you must also use the web interface on the secondary Cisco Defense Orchestrator to promote it to active.