RE: [FW1] CSM Proxy

[Carric Dooley <carric@com2usa.com>]

If load balancing were ALL I wanted to acheive, this would be correct.
HOWEVER, I was stuck with an existing desktop configuration (i.e. all
browsers pointed at a particular host name... thus my decision for round
robin.  Given the time constraints, we didn't want to touch 2500 desktops
before roll-out.  On the other hand I want the proxies to be able to share
the information in each others' cache, so I am trying to get CARP to work.
How else will the caches be aware of each other??


Carric Dooley CNE
COM2:Interactive Media
http://www.com2usa.com

"Talent does what it can; genius does what it must." 
		- Edward George Bulwer-Lytton 


On Thu, 9 Sep 1999, Krishna Murthy K.P. (CTS) wrote:

> Hi ., 
> 
> When you use RR-DNS option., I don't see any necessity for using CARP since
> for every DNS query you're toggled between the two proxy servers and hence
> is the need for authentication.
> 
> If you still want to use CARP , don't use RR-DNS and CSM-CARP will take care
> of rerouting the proxy requests between the proxy servers depending on the
> load etc ...
> 
> with regards
> Krish
> 
> 
> -----Original Message-----
> From: Carric Dooley [mailto:carric@com2usa.com]
> Sent: Wednesday, September 08, 1999 7:56 PM
> To: Firewalls List; FW-1 Mailing List
> Subject: [FW1] CSM Proxy
> 
> 
> 
> Is anyone using CSM Proxy as their proxy solution?  I am working with a
> setup of 2 proxies (setup round-robin in DNS becuase I had to work with an
> existing config for our clients that were already configured for a
> specific host), behind a single FW-1 firewall.  The bite is that I can't
> get CARP to cooperate.  Every time I enable it, my users starte getting
> double authentication requests (no matter which  proxy you hit first, you
> get a uid/passwd dialog box, it authenticates you, then you are
> immediately prompted for authentication from the other box which never
> lets you authenticate).  As soon as I have a proxy leave the array, the
> problem goes away.
> 
> Any ideas?
> 
> 
> Carric Dooley CNE
> COM2:Interactive Media
> http://www.com2usa.com
> 
> "Talent does what it can; genius does what it must." 
> 		- Edward George Bulwer-Lytton 
> 
> 
> 
> 
> ============================================================================
> ====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ============================================================================
> ====
> 



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================