| |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] High availability question
- To: [email protected]
- Subject: Re: [FW-1] High availability question
- From: Kevin Martin <[email protected]>
- Date: Thu, 28 Feb 2002 09:44:24 -0600
- Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
- Sender: Mailing list for discussion of Firewall-1 <[email protected]>
- Thread-index: AcHAPmsivt3tUyvTEda9iADQt8hU6gAMPvAg
- Thread-topic: [FW-1] High availability question
You could use routing protocols such as OSPF to re-route traffic from
one site to the other if a failure occurs. There will be a hiccup in
the traffic during the failover but, unless the traffic is highly
session oriented, this should not be an issue. If you've got production
applications that will get wiped out during one of these failovers
(since you can't realistically maintain state between geographically
diverse firewalls) then you need to implement either HA pairs of
firewalls at the different sites or load-balanced/shared firewalls at
the different sites so you can have state-sync going locally and then
your users won't see any glitches (I've used Stonesoft's product for
this but I hear that Rainfinity's product is very good as well).
Good luck.
Kevin
-----Original Message-----
From: Adrian Wilson [mailto:[email protected]]
Sent: Thursday, February 28, 2002 3:31 AM
To: [email protected]
Subject: [FW-1] High availability question
I am looking to add a backup Internet connection at a site connected via
a private WAN link. At present Sites A & B both use the Internet
connection at Site A which is protected by FW-1. I want to add a second
connection at Site B (again using FW-1) such that the connected systems
(Sites A & B) would not be affected by a failure of the Internet
connections at either location.
However, I have no idea on the best approach to this. Any suggestions or
resources I should investigate gratefully received.
Thanks in advance,
Adrian Wilson
IT Infrastructure Engineer
VEGA Group
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
|
|
