I use Cisco ASA in branches of our organization. Each device has an IPsec tunnel that connects to the main office. To access the global network each device also has a NAT. Recently, a task arose to forward all branch traffic into the tunnel to the main office and access Internet through the main office device.
So I have to create some kind of set of rules that will switch Internet connection from tunnel to local NAT if we have an accident in main office. Is exist some kind of mechanism on Cisco ASA looks like a SLA Monitor that can shutdown NAT rules? Can I use PBR for this task?
Thank you in advance.