Not sure if this is what you mean but....
Why not run Websense on NT using NT Enterprise and use clustering (WLBS)
between the two NT boxes. This will give load sharing between the two boxes
and also provide failover support.
Just a thought.
Lee Field
Security Systems Administrator
-----Original Message-----
From: Robert MacDonald [mailto:[EMAIL PROTECTED]]
Sent: Friday, June 09, 2000 1:19 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: [FW1] High-Availability WebSENSE
Shawn,
Off the top of my head, why not setup two Websense boxes and
reference them through a virtual IP? The your fw can still see the
'one' system, but there will be more than one for HA.
I don't know Websense, so I don't know if these systems
connect to the firewall(s) which might throw a wrench into the mix.
Robert
- -
Robert P. MacDonald, Network Engineer
e-Business Infrastructure
G o r d o n F o o d S e r v i c e
Voice: +1.616.261.7987 email: [EMAIL PROTECTED]
>>> Shawn Chandler <[EMAIL PROTECTED]> 6/8/00 5:42:10 PM >>>
>
>Hey folks...
>
>I'm in the middle of designing a high-availability Firewall-1 solution for
>a client. So far what I've got is two Sparc based machines running
>CP2000 and Stonesoft FullCluster with an NT management server.
>One of the requirements for the project is that WebSENSE for FW-1
>run and be redundant is some fashion. Since I can only specify my
>UFP resource to one server (and there is no redundancy capability
>built into WebSENSE) it would require me to modify my ruleset if
>one of the firewalls failed (the WebSENSE daemon will be running on
>both of the firewalls).
>
>Does anyone know of a way around this? I've thought about loading
>WebSENSE on a seperate machine but this still gives me a single
>point of failure. Any suggestions would be greatly appreciated. TIA!
>
>Shawn
============================================================================
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
============================================================================
====
____________________________________________________________________________
__
This message has been checked for all known viruses by Star Internet
delivered
through the MessageLabs Virus Control Centre. For further information visit-
http://www.star.net.uk/stats.asp
**************************************************************************
This message originated from the Internet.
Users are warned against trusting content of such messages.
***************************************************************************
**************************************************************************
From Swiss Life (UK) plc
The Swiss Life (UK) Marketing Group comprises :
Swiss Life (UK) plc for insurance and pension products.
Reg No 2529609. Regulated by the Personal Investment Authority.
Swiss Life (UK) Services Ltd marketing associate.
Reg No 844703. Regulated by the Personal Investment Authority.
Registered Offices: Swiss Life House 24 - 26 South Park
Sevenoaks Kent TN13 1BG England. All incorporated in England
Swiss Life Investment Management Ltd managers of a UCITS.
Reg No 175316. Incorporated in Ireland.
***************************************************************************
______________________________________________________________________________
This message has been checked for all known viruses by Star Internet delivered
through the MessageLabs Virus Control Centre. For further information visit-
http://www.star.net.uk/stats.asp
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
