Hi,
>> Can sessions be maintained trough a crash?
>>
>> All connections synchronized by FireWall-1 are preserved through switch
>over or load redistribution if the state table synchronization between
>firewalls is activated. The user will see only a delay of a few seconds.
>
>But how about VPN-1 sessions, are they still maintained?
VPN-1 sessions and SecuRemote sessions can be preserved, depending on which
version of FireWall-1 and StoneBeat you use. FW-1 4.1 SP2 and FullCluster 1
SP4 or better, and I believe the latest verison of 2.0 are able to failover
all of these when properly configured. Certainly, the OPSEC certified
versions support this (see Check Point's OPSEC partners page at
http://www.checkpoint.com/opsec/performance.html#HA_Load_Balancing.
>2. What is the difference among various 3.x versions of stonebeat HA?
3.0 through 3.1.5 of the original StoneBeat HA product changes are
predominantly bug fixes, additional compatibility or support with switches
and NICs, OPSEC-certified code, additional built-in tests for the test
subsystem. Specific changes from release to release are documented in the
release notes, available at http://www.stonebeat.com/download/ for each
product.
Mark Boltz
Stonesoft, Inc.
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
