NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Two ISPs Questions



haaa, don't forget recent power outage in NY :( Since this is a firewall
list, Security will always be your first consideration I assume.
Availability is one of the three fundamentals of Information Security
(Confidentiality, Integrity, and Availability). Said that, fundamentals of
Information Security would take BCP/DRP into consideration. Checkout
following news item link where similar situation came up and CheckPoint
solution was used.

 http://www.c-cure.be/pressreleases/2003-01/HA.html

There might be a little bit of routing issue and you might have to configure
BGP peering between two ISP's, which can be easily handled by Nokia
appliances. However, certain ISP's may not allow that, please check with the
ISP.

If DNS is a concern, look at below example. You may have two separate Name
Servers coexist without any issues.

#dig  ns1.sprintlink.net

ns1-auth.sprintlink.net. 25562  IN      A       206.228.179.10
ns2-auth.sprintlink.net. 25562  IN      A       144.228.254.10
ns3-auth.sprintlink.net. 25562  IN      A       144.228.255.10

If it's ease of use/configuration over security, one ISP definitely makes
sense.

-Tasawar

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[email protected]]On Behalf Of Tasawar
Jalali
Sent: Monday, August 18, 2003 11:25 AM
To: [email protected]
Subject: Re: [FW-1] Two ISPs Questions


Curt,
I would strongly recommend two T1's with two different ISP's for the sake of
Business Continuity and Disaster Recovery. It might be easy in short term to
go with one ISP but in long term, you will benefit by going with two
different ISP's.

Just my two cents..

-Tasawar
CISSP, TCISA, CCSE-NG, MCSE+I, CNE, FCSE, CCNA
http:/www.securenode.com



-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[email protected]]On Behalf Of Miller,
Curt A.
Sent: Monday, August 18, 2003 11:13 AM
To: [email protected]
Subject: [FW-1] Two ISPs Questions


We have reached the limit for one T1 for our firewall.  We are looking
at putting in a second T1.  Can someone give me advice on if is better
to go with two ISPs or one ISP?  If we go with one we can IMA the two
T1s together.  If we go with two how do we do this?  Would something
have to be done on the ISPs side to be able to use both?  I guess I need
total advice on doing this.


Thanks,
Curt Miller
Bowater Incorporated(Voice)(FAX)
http://www.bowater.com <http://www.bowater.com/>
[email protected] <mailto:[email protected]>



=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.