Greetings,
I was in this type of senerio. To load balance the firewalls
2-Nokia-Checkpoint) we used 4 Cisco (Arrowpoint) 11000. They are in
failover mode with identical configs. One and two are in front of the
firewalls. Three and four are below the firewalls. The trick is to make
the conversations stick to the firewall who is assigned to do this. A
single firewall must keep the conversation. If another gets it, it will
drop it as it has no knowledge of it. This means that you must have "load
balancing on both sides of the firewall. I am not sure how this would be
handeled if the firewalls were clustered.
Does this help?
--
A. Dominick Marino
Quality Networking Inc.
www.qualitynetworkinginc-ny.net
E-mail
[EMAIL PROTECTED]
[EMAIL PROTECTED]
Cell (516) 480-2973
Phone (631) 427-4931
""Rossetti, Stan"" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hello Everyone,
>
> Does anybody know if it is possible to load balance across multiple PIX
> firewalls? I have looked at numerous Cisco web pages, but never any
mention
> of load balancing. I have talked to a sales engineer and he has said that
> to get 1GB of throughput from a PIX firewall, you need to install 3 PIX
> firewalls and do load balancing across them. The max throughput from one
> PIX is 370MBps. Of course, I can't get the sales engineer to return my
call
> now. Doe anyone know if this is true? Do you have to have 3 PIX to do
load
> balancing? I would like to just do load balancing across 2 PIX firewalls.
> Is this possible?
>
> Thanks in advance.
>
>
>
>
> Thanks
>
> Stan Rossetti
>
>
> NASA - PriSMS
> Advanced Technology Group
> Voice: (256) 544-5031
> Email: [EMAIL PROTECTED]
> Beeper: 544-1183 pin 0112
>
> CCDA, CCNA, CCSE
>
> _________________________________
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
