Re: Redundant firewall

[Lance Ecklesdafer]

Besides the high availability options available with the Nokia and the Stonebeat product offerings you must consider your connection to the service provider as well. Configure the routers accessing the ISP to load balance and back each other up as well. You should also have true diversity through your carrier's network as well. Make sure that you are not using the same POP for both connections to the ISP. Maybe use two ISPs in case one is having trouble. A number of people who configure redundant firewall environments forget these points in designing a high availability solution. The result is a highly available firewall that will be useless when the carrier experiences a problem.  The ISP we use is a very large one and very reliable, however we have experienced several outages this year alone. The longest of these outages lasted over three hours. It is a good thing we do not live off of one connection to the Internet for our ANX connectivity.   Lance ----- Original Message ----- From: Vijay V To: [EMAIL PROTECTED] Sent: Thursday, August 17, 2000 7:02 AM Subject: Redundant firewall Hi  All,   Any pointers on how to setup redundant firewall with FW-1 so if one fails other one should take over. i am not plannig for a backup kind of firewall, i want both the firewalls to be live on the network.     Thanks   Vijay