[FW1] Load balancing vs. FW state

["Belanger, Derek" <DBelange@FW1-NOSPAMcomversens.com>]

The scenario is...I've got a load balancer (RadWare WSD) outside a firewall
(CheckPoint 4.0 on NT) with redundant servers behind the firewall. My
question is what happens to the statefullness of an established connection
should it be redirected from one load balanced server to the other.

Example:

Client establishes a connection with RadWare and server1 is selected (load
balanced) as the connection endpoint, the firewall accepts the connection
and records the state (correct so far?).

Then server1 fails. The RadWare moves the connection to server2. (What
happens now? Will the firewall reject the connection because the endpoint
has changed there by violating the statefullness?)

Please help,
Derek Belanger




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================