Please excuse my ignorance here.  I've never had to design a HA/LB
environment, but I see it in our distant future.  So I have been following
this thread as an educational tool.

Is everyone suggesting that you can use switches on either side of the
firewall to achieve HA/LB of the firewall, rather than a dedicated firewall
solution (eg Stonebeat, etc)?  If so, what are the advantages?

-----Original Message-----
From: Mark Decker [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 28, 2000 7:22 PM
To: [EMAIL PROTECTED]
Subject: RE: [FW1] Firewalls & Web Switches (Alteon)



For web-server load-balancing, most people put the switch between the
firewall(s) and the web-servers (or as Ritesh said, behind the FW).  If you
also want firewall load-balancing, you can put another one in front of the
firewalls.  Note that a single switch can become another point of failure.
People who need high availability have typically deployed such devices in
pairs to address this problem.  For a typical HA/LB setup, a minimum of 4
switches (one pair for each subnet) are required.

Mark L. Decker
Rainfinity
[EMAIL PROTECTED]
408-382-4870


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Ritesh
Rekhi
Sent: Monday, August 28, 2000 2:00 PM
To: 'Tom Sevy'; Check Point FW List (E-mail)
Subject: RE: [FW1] Firewalls & Web Switches (Alteon)


Hi Tom,
           We are using FW-1 and alteon in one setup.What i think is that
you should put alteon switch behind the firewall.

regd's
Ritesh


-----Original Message-----
From: Tom Sevy [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 28, 2000 12:30 PM
To: Check Point FW List (E-mail)
Subject: [FW1] Firewalls & Web Switches (Alteon)



Has anyone used Alteon Web Switches (180 series) along with FW-1?

If so, how does the perimeter of your network look?  Did you put the
Switch(es) outside of the firewall(s)?



============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====



============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to