RE: [FW1] only floodgate?

["Churcher, Simon" <SimonC@FW1-NOSPAMmicropal.com>]

Your best option would probably be to prioritise the traffic that hits the
virtual IP of the firewall HA solution. You could put a Packeteer box in
front of each required interface and shape the traffic that way. You will
probably not get a lot of benefit in putting one between the HA solution and
the Internet router unless you split the functionality (and remember, you
can't control what comes down your internet pipe without your ISP involved).

The Internal packet shaper could control in detail, what traffic hits the
firewall first. The External packet shaper could prioritise
firewall-firewall traffic, thus the VPN as a whole, whilst perhaps putting
HTTP traffic at a lower priority/bandwidth.

I'm no expert at this, but that is the kind of approach I would look at.

-----Original Message-----
From: Hartmann, Josef [mailto:hartmann@secunet.de]
Sent: 16 March 2001 09:49
To: 'Churcher, Simon'
Subject: RE: [FW1] only floodgate?


I would like to prioritise traffic in a HA solution (load balacing)
including VPN connections. Unfortunately Floodgate-1 is only useable for Hot
Standby Solutions.

Josef

> -----Original Message-----
> From:	Churcher, Simon [SMTP:SimonC@micropal.com]
> Sent:	Friday, March 16, 2001 9:32 AM
> To:	'Hartmann, Josef'; Checkpoint Mailing List
> Subject:	RE: [FW1] only floodgate?
> 
> That depends ... Floodgate can prioritise traffic within a VPN, no other
> product or solution that I know of does the same.
> If you are not using VPN's then this is obviously no help. The other
> solutions would be that of QoS features on your routers, or something like
> packeteer. These two however have no direct interaction with Firewall-1.
> 
> Do you have any more detail on what you are trying to achieve?
> 
> -----Original Message-----
> From: Hartmann, Josef [mailto:hartmann@secunet.de]
> Sent: 16 March 2001 08:17
> To: Checkpoint Mailing List
> Subject: [FW1] only floodgate?
> 
> 
> 
> Are there any other (3rd party) products which do the job floodgate-1
> does?
> 
> 
> ==========================================================================
> ==
> ====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==========================================================================
> ==
> ====
> 
> 
> ________________________________________________________________
> The information contained in this message is intended only for the
> recipient, may be privileged and confidential and protected from
> disclosure. If the reader of this message is not the intended recipient,
> or an employee or agent responsible for delivering this message to the
> intended recipient, please be aware that any dissemination or copying of
> this communication is strictly prohibited. If you have received this
> communication in error, please immediately notify us by replying to the
> message and deleting it from your computer.
> 
> Thank you,
> Standard & Poor's


________________________________________________________________
The information contained in this message is intended only for the recipient, may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, please be aware that any dissemination or copying of this communication is strictly prohibited. If you have received this communication in error, please immediately notify us by replying to the message and deleting it from your computer.

Thank you,
Standard & Poor's


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================