Re: [FW1] Redundancy

[Brett Calabrese <brettc@mail.sportsline.com>]

Oswald

Firewall1 does not have balancing or failover functionality built in.

Determining the necessity of a failover/load sharing scheme is up to you, it depends
on your environment and pocketbook.  How you would failover is also something you
have to think about, you could just have  a backup box that you manually turn on in
case of a failure.  This would be the cheapest solution.

The two methods of automatic  failover  come to mind, using 2 firewall machines with
a product such as StoneBeat to failover on box to the other, it does not have load
sharing - yet.  In this case one box is in hot standby mode, the other is live. Note
StoneBeat is expensive software. There is other failover software such as Qualix.
The other method is using a Nokia solution that will load share (not load balance -
sharing is done where one firewall box handles a set of machines and the other
firewall takes care of the rest). In the case of a failure one box will take the
whole load.


Oswaldo Souza wrote:

> Hi,
>
> Do you guys think that it is necessary to make a high avaiability design
> to my firewall, with two machines making traffic balance, and if one
> goes down, there is no impact to my enviromment ?
> If yes, Firewall-1 implements this functionality ?
>
> obs: I'm using a RISK.
>
> Thanks in advance,
>
> Oswaldo.
>
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================

--
Brett Calabrese               SportsLine USA Inc.
Sr. Systems Administrator     6340 NW 5th Way
brettc@sportsline.com         Fort Lauderdale, FL 33309
954-351-2120 ext 522          http://cbs.sportsline.com




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================