[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] Two ISPs Questions
haaa, don't forget recent power outage in NY :( Since this is a firewall list, Security will always be your first consideration I assume. Availability is one of the three fundamentals of Information Security (Confidentiality, Integrity, and Availability). Said that, fundamentals of Information Security would take BCP/DRP into consideration. Checkout following news item link where similar situation came up and CheckPoint solution was used. http://www.c-cure.be/pressreleases/2003-01/HA.html There might be a little bit of routing issue and you might have to configure BGP peering between two ISP's, which can be easily handled by Nokia appliances. However, certain ISP's may not allow that, please check with the ISP. If DNS is a concern, look at below example. You may have two separate Name Servers coexist without any issues. #dig ns1.sprintlink.net ns1-auth.sprintlink.net. 25562 IN A 206.228.179.10 ns2-auth.sprintlink.net. 25562 IN A 144.228.254.10 ns3-auth.sprintlink.net. 25562 IN A 144.228.255.10 If it's ease of use/configuration over security, one ISP definitely makes sense. -Tasawar -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[email protected]]On Behalf Of Tasawar Jalali Sent: Monday, August 18, 2003 11:25 AM To: [email protected] Subject: Re: [FW-1] Two ISPs Questions Curt, I would strongly recommend two T1's with two different ISP's for the sake of Business Continuity and Disaster Recovery. It might be easy in short term to go with one ISP but in long term, you will benefit by going with two different ISP's. Just my two cents.. -Tasawar CISSP, TCISA, CCSE-NG, MCSE+I, CNE, FCSE, CCNA http:/www.securenode.com -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[email protected]]On Behalf Of Miller, Curt A. Sent: Monday, August 18, 2003 11:13 AM To: [email protected] Subject: [FW-1] Two ISPs Questions We have reached the limit for one T1 for our firewall. We are looking at putting in a second T1. Can someone give me advice on if is better to go with two ISPs or one ISP? If we go with one we can IMA the two T1s together. If we go with two how do we do this? Would something have to be done on the ISPs side to be able to use both? I guess I need total advice on doing this. Thanks, Curt Miller Bowater Incorporated(Voice)(FAX) http://www.bowater.com <http://www.bowater.com/> [email protected] <mailto:[email protected]> ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|