[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [FW1] Load Balancing Agent
Title: RE: [FW1] Load Balancing Agent
My company might be interested in this:
Questions:
1. Does Rainwall Load-Ballance VPNs connections including SecuRemote? If so how does that work? Would a remote site connecting to a Load-Ballanced VPN connect to 1 IP address? In other words, in the Network objects, could I just set up firewall object that points to a single IP address created by Rainwall for load ballanced VPNs? If so how would I set up the interfaces?
2. Lets say there is a farm of 3 Firewalls. Does Rainfront allow for 1 gateway for all of the internal machines to see, or is there a gateway for each firewall?
3. Is there ANY way to get Rainwall to work with a Nokia IPSO 3.2.1 box?
I am greatly intersted in answers to these questions.
C:\Mark
-----Original Message-----
From: Mark Decker
To: [email protected]
Cc: 'Paul Telle'; 'Henrik Widov'; Jhochberg@Earthlink. Net
Sent: 1/26/2001 12:16 PM
Subject: RE: [FW1] Load Balancing Agent
The things Jeff mentioned about Connect Control and Check Point's own HA
module are true, but I do have a point of correction: StoneBeat
FullCluster is not the only alternative for true firewall clustering.
Rainfinity's RainWall is an active/active clustering solution for
FW-1/VPN-1. Unlike StoneBeat, RainWall does not require reconfiguration
of routers and switches to use multicast MAC addresses. It is a
3rd-party product, but has been designed specifically for FW-1/VPN-1,
and thoroughly tested and certified by Check Point for OPSEC compliance.
Mark L. Decker
Rainfinity
[email protected]
www.rainfinity.com
> -----Original Message-----
> From: Jeff Hochberg
> Sent: Friday, January 26, 2001 10:10 AM
> To: 'Paul Telle'; 'Henrik Widov';
>
> Connect Control is not a firewall load balancing product. It
> is used for
> load balancing web servers (etc.) that sit behind your firewalls.
> Checkpoint does have an HA product for firewalls, but it
> doesn't perform
> load balancing. Only one gateway is active at any given
> point in time.
>
> For true firewall clustering, your only alternative is Stonebeat Full
> Cluster. Unfortunately, with the way this product works
> (multicast), there
> is a very strong possibility that you will also need to touch
> the configs on
> your routers and/or switches in order to get it to function properly.
>
========================================================================
========
To unsubscribe from this mailing list, please see the instructions
at
http://www.checkpoint.com/services/mailing.html
========================================================================
========
