[FW1] Multiple Leaselines -Reply

[Mitch Russell <Mitch_Russell@sabre.com>]

OK, you've got one pipe to the Internet for desktop access, one for ECommerce.
By simple routing on NT, your packets contain no identifing information that can
be used to distinguish which route should be used.

If you are going to the expense to pull a second line, put in a second firewall.
It would be cheaper to put in a management station also, split your current
license, and only buy the FWD license for the second firewall. The first
firewall would handle desktop, the second ECommerce. The first firewall would
have a route to the old line, the second to the new line. Routing problem solved
for outbound. Also, consider your inbound routing. Your desktop access should
appear as a different network from your ECommerce network, so your inbound
routing is segragate as you desire.

Rule #1 on ECommerce, turn loose the purse strings.

Mitch Russell
Sabre, Inc.
Home of TRAVELOCITY.COM

>>> "Low Kok Han, Raymond" <lowkh8@pacific.net.sg> 03/31/99 08:00am >>>

I've got a leaseline to Internet now and thinking of implementing another
different leaseline solely for ECommerce purposes. Both line are supposed to
be protected by the same NT Checkpoint FW on the WAN side. The users for
this ECom would be part of the users already currently on the LAN side.
Would such a situation work? My guess is that it depends if NT can do the
routing. Any advice?



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================