[FW-1] statefull failover for NG AI across

["Hennessy, Robert" <robert.hennessy@FW1-NOSPAMRBCCM.COM>]

Hi,

I'm upgrading from 4.1 -> AI for many pairs of firewalls but I have an issue
with the statefull failover for my only geographically distributed pair.

Requirements: failover using dynamic routing and statefull connection to the
vendor without a common subnet for sync 
* firewall A in Toronto syncs with firewall B in NY.   fw-A -> WAN -> fwB


current setup in 4.1, it's a little non-standard
We have a vendor that's connected using Toronto as the primary and NY for
backup.
When the dynamic routing from Toronto is lost then the higher metric path
from NY is taken.
The through put is small allowing the firewalls to sync using the internal
interfaces and connect across a wan connection.

In 4.1 this is possible due to the low throughput and the fact any ip
address could be put into the sync file.

In NG they are using a broadcast ip so it's a little different.

Any Ideas??
Nokia Clustering with Multicast is not an option because I need dynamic
routing.
would a vpn tunnel work between them?

I have support working to see if this is possible in NG AI.

Thanks in advance
Rob



<font face="Times New Roman" size="3">
<p>------------------------------------------------------------------------------</p>
<p> This e-mail may be privileged and/or confidential, and the sender does not waive any related rights and obligations. Any distribution, use or copying of this e-mail or the information it contains by other than an intended recipient is unauthorized. If you received this e-mail in error, please advise me (by return e-mail or otherwise) immediately.</p>
<p> Ce courriel est confidentiel et protégé. L'expéditeur ne renonce pas aux droits et obligations qui s'y rapportent. Toute diffusion, utilisation ou copie de ce message ou des renseignements qu'il contient par une personne autre que le (les) destinataire(s) désigné(s) est interdite. Si vous recevez ce courriel par erreur, veuillez m'en aviser immédiatement, par retour de courriel ou par un autre moyen.</p>
<p>====================================================</p>
</font>


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================