Interesting... I found quite the contrary... Full state
information for both firewall and vpn are mirrored to
the standby unit in all modes (transparent, route, and
nat)... I can only guess who might have sent
the "private" response...
I recently tested this feature during an evaluation of
their equipment. I streamed both audio and video
through the firewall as well as through a vpn tunnel
and in both instances, failovers performed flawlessly
within one second...
I agree, the transparent mode is an excellent feature
for quickly and seamlessly dropping in the NetScreen
appliances with a minimum of effort and
configuration.
However, in order to use some of the really cool
advanced features like Policy-Based NAT and Virtual
Systems, the other two modes are required for
operation.
David P.
>
> Yep... which is an excellent feature. Except in a
private response I have been told that state sync in
an HA configuration doesn't work in transparent mode.
>
> Paul.
>
> >>> acs <[EMAIL PROTECTED]> 5/17/2001
04:22:15 pm >>>
> All the filtering capabilities are available in
> transparent mode.
>
> The ability to do transparent sets netscreen apart
> from most firewalls / appliances.
>
> acs
>
> --- Paul Murphy <[EMAIL PROTECTED]>
wrote:
> >
> >
> > Does anyone know if a Netscreen in transparent
mode
> > still enforces all parts of the security policy? Is
> > anything lost from using this configuration?
> >
> > Is there any downsides that people are aware of?
> >
> > Cheers,
> >
> > Paul Murphy.
> >
> >
> >
> >
> -------------------------------------------------------------------
--------------------------------------------------------
> > CRESTCo Ltd. The views expressed
above
> > are not necessarily those
> > 33 Cannon Street. held by CRESTCo
Limited.
> > London EC4M 5SB (UK)
> > +44 (020) 7849 0000 http://www.crestco.co.uk
> >
> -------------------------------------------------------------------
--------------------------------------------------------
> > -
> > [To unsubscribe, send mail to
> > [EMAIL PROTECTED] with
> > "unsubscribe firewalls" in the body of the
message.]
>
>
>
___________________________________________
_______
> Do You Yahoo!?
> Yahoo! Auctions - buy the things you want at great
prices
> http://auctions.yahoo.com/
>
>
>
> -------------------------------------------------------------------
--------------------------------------------------------
> CRESTCo Ltd. The views expressed above
are not necessarily those
> 33 Cannon Street. held by CRESTCo Limited.
> London EC4M 5SB (UK)
> +44 (020) 7849 0000 http://www.crestco.co.uk
> -------------------------------------------------------------------
--------------------------------------------------------
> -
> [To unsubscribe, send mail to
[EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
