State sync on transparent. Well, thats good to know. I was told it was coming in a
later release, and emailed Netscreen for confirmation but have had no response.
Yeah sure... transparent mode = no NAT, but thats as expected. The NAT can looked
after elsewhere.
I'd only use netscreen as a perimeter screening firewall anyway, and back it up with
an alternate firewall handling everything else.
>>> David Pearl <[EMAIL PROTECTED]> 5/18/2001 08:49:31 pm >>>
Hmm...that's interesting... I found quite the contrary...
FULL state information for both firewall and vpn are
mirrored to the standby unit in all modes (transparent,
route, and nat)... I can only guess who might have
sent the "private" response...
I recently tested this feature during an evaluation of
their equipment. I streamed both audio and video
through the firewall as well as through a vpn tunnel
and in both instances, failovers performed flawlessly
within one second...
I agree, the transparent mode is an excellent feature
for quickly and seamlessly dropping in the NetScreen
appliances with a minimum of effort and
configuration.
However, in order to use some of the really cool
advanced features like Policy-Based NAT and Virtual
Systems, the other two modes are required for
operation.
David P.
> That is not good, I would like to hear more. We are
> evaluating them.
>
> acs
>
>
> --- Paul Murphy <[EMAIL PROTECTED]>
wrote:
> >
> > Yep... which is an excellent feature. Except in a
> > private response I have been told that state sync
in
> > an HA configuration doesn't work in transparent
> > mode.
> >
> > Paul.
> >
> > >>> acs <[EMAIL PROTECTED]> 5/17/2001
04:22:15 pm
> > >>>
> > All the filtering capabilities are available in
> > transparent mode.
> >
> > The ability to do transparent sets netscreen apart
> > from most firewalls / appliances.
> >
> > acs
> >
> > --- Paul Murphy <[EMAIL PROTECTED]>
wrote:
> > >
> > >
> > > Does anyone know if a Netscreen in transparent
> > mode
> > > still enforces all parts of the security policy?
> > Is
> > > anything lost from using this configuration?
> > >
> > > Is there any downsides that people are aware
of?
> > >
> > > Cheers,
> > >
> > > Paul Murphy.
> > >
> > >
> > >
> > >
> >
> -------------------------------------------------------------------
--------------------------------------------------------
> > > CRESTCo Ltd. The views expressed
above
> > > are not necessarily those
> > > 33 Cannon Street. held by CRESTCo
Limited.
> > > London EC4M 5SB (UK)
> > > +44 (020) 7849 0000
http://www.crestco.co.uk
> > >
> >
> -------------------------------------------------------------------
--------------------------------------------------------
> > > -
> > > [To unsubscribe, send mail to
> > > [EMAIL PROTECTED] with
> > > "unsubscribe firewalls" in the body of the
> > message.]
> >
> >
> >
___________________________________________
_______
> > Do You Yahoo!?
> > Yahoo! Auctions - buy the things you want at great
> > prices
> > http://auctions.yahoo.com/
> >
> >
> >
> >
> -------------------------------------------------------------------
--------------------------------------------------------
> > CRESTCo Ltd. The views expressed
above
> > are not necessarily those
> > 33 Cannon Street. held by CRESTCo
Limited.
> > London EC4M 5SB (UK)
> > +44 (020) 7849 0000 http://www.crestco.co.uk
> >
> -------------------------------------------------------------------
--------------------------------------------------------
>
>
>
___________________________________________
_______
> Do You Yahoo!?
> Yahoo! Auctions - buy the things you want at great
prices
> http://auctions.yahoo.com/
> -
> [To unsubscribe, send mail to
[EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
---------------------------------------------------------------------------------------------------------------------------
CRESTCo Ltd. The views expressed above are not necessarily those
33 Cannon Street. held by CRESTCo Limited.
London EC4M 5SB (UK)
+44 (020) 7849 0000 http://www.crestco.co.uk
---------------------------------------------------------------------------------------------------------------------------
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
