Re: [FW-1] Nokia clustering

[Mitchell Rowton <mitchell@FW1-NOSPAMATTACKPREVENTION.COM>]

> > In the IPSO documentation you can read that Nokia recommends that
the two
> > cluster protocol networks are dedicated. Has anybody experiences
with
> > cluster networks not being dedicated, i.e. sharing with FW-1 sync
network
> or
> > with a real production network?

I know of one very large company who brought down their website because
the sync network was not on a dedicated interface (large amount of
state sync information).  Depending upon the traffic this may not be a
problem for you.  If you do decide not to use a dedicated interface for
sync, defiantly attempt this after production hours, and monitor it
closely afterwards.  But the IPSO documentation should be followed if
possible.


Mitchell

____________________________________________________
http://www.attackprevention.com
Information Security documents, articles, and policy

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================