Re: [FW-1] High Availability

[James Schnack <acrux14@FW1-NOSPAMHOTMAIL.COM>]

I agree with Steve on this one.

I have a bit of experience with Nokia's VRRP solution, and it works "as
advertised"...  ;)  I definately recommend it, although you should keep in
mind that it is NOT a load balancing solution, just HA. (There's a way to do
a bit of load-balancing by configuring multiple virtual routers, but it's
more like a workaround...)

As for SB (it provides both HA and LB), my experience is more limited, but
the little I have interacted with SB support, I got the same feeling Steve
did. Coincidence ? Maybe...

Just my thoughts.

James


> From: Steve McNutt <mcnutt@LIGHTNINGCLOUD.NET>
> Reply-To: Mailing list for discussion of Firewall-1
> <FW-1-MAILINGLIST@beethoven.us.checkpoint.com>
> To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
> Subject: Re: [FW-1] High Availability
> Date: Thu, 11 Apr 2002 23:32:05 -0400
>
> Well, I suspect you will get a veritable flood of replies on this one :-)
>
> The two HA solutions with FW-1 that I have experience with are Stonebeat
> Full cluster and the Nokia solution.
>
> The stonebeat setup I worked with used sun E250 enforcement servers with
> gig E interfaces and a ultra 10 for a management server
>
> I've done numerous setups with nokia boxes using IP 330's and 440's with a
> variety of interfaces.
>
> The stonbeat was a pain in the a$$, and product support seemed more
> interested in deflecting blame and making excuses than working the
> problems.  I walked away with a bad taste in my mouth.
>
> The Nokia solution works beautifully.  very easy to configure, maintain,
> and administer.  Only drawback is failover can take a couple of seconds.
> If you require subsecond failover, it's not a good choice.
>
> I cannot comment on rainwall or other solutions, as I have not implemnented
> and/or supported them.
>
> Have a good one.
>
>
> Steven McNutt, CCIE #6495, CCSE #6224, MCSE
> President
> LightningCloud Technologies
> bus:cel:mcnutt@lightningcloud.net
>
> -----Original Message-----
> From: Arvanitis, Steve [mailto:steve.arvanitis@AXA-CANADA.COM]
> Sent: Thursday, April 11, 2002 4:11 PM
> To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
> Subject: [FW-1] High Availability
>
>
> I am looking at a clustering or load balancing solution for my environment.
>  Does anybody have any suggestions on what I should look at?  I am
> presently looking at RainWall and Checkpoints High Availability module.
>
> Thanks
> Steve
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================




_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp.

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================