NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW1] Distributed Installation with Mgmt & Firewall module both in the same machine - Is it possible at all ?





Hi !

I'm currently trying to setup a pair of FW-1 v4.1 on Ultra 10 Solaris 7. Stonebeat full cluster v2.0 solution is used to cater for HA and load balancing. FW-1 gui on a NT machine.

From what is understood, distributed installation allows mgmt and firewall modules to be separated. However, could they be installed on the same machine using the distributed option ?? Are there any config files that can be edited ??

Due to some constraints, I'm hoping to install the following using distributed installation

Machine A (Sol 7 ) Machine B (Sol 7) Machine C (NT)
--------------------------- -------------------------- ------------------------------
Mgmt Module (Main) Mgmt Module (Standby) FW-1 GUI
Firewall Module Firewall Module Stonebeat Full cluster control



Firewall modules on both Machine A & B will treat Mgmt-Main (A) as the Master and retrieve config files from it. However in the event that Machine A fails and Mgmt-Main is down. Firewall module on machine B can get policies from Mgmt-Standby which is on the same machine.


Problem is :
There doesn't seem to be a segregation of installation of modules on a same machine. For distributed installation, cpconfig menu would either be for the mgmt server or enforcement point. For standalone, there doesn't seems to be any options where i can specify additional masters.


If the above configuration doesn't work, it would mean 2 extra machines for mgmt servers. Increase in cost but with limited budget.

Please do advise, any other suggestions are very much appreciated.


Thanks in advance.


Rgds,
Patricia



================================================================================
    To unsubscribe from this mailing list, please see the instructions at
              http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.