With an OC3, you certainly have bandwidth and low latency to probably share state information, but I still would not advise it. Primarily, because it doesn't work well at all to resolve routing problems. I believe by default, state sync requires 50ms in order to replicate between Firewalls, and typically the misrouted packet could have returned and been dropped by the time the new state information is propogated. As a result, you get a lot of drops and retransmits.
Fix the async routing problem. A clean fix is always better than a quick hack... -- William H. Gates Chairman and Chief Software Architect Microsoft Corporation bill @ billgates.org > I have two firewall systems. One at our main production facility and > one out at our remote plant. They are linked across an OC-3 network > and both share a connection at the ISP. > > Is there a way to have each of them share each other's connection > table? We're seeing incidences where outbound traffic from our remote > plant is going out to the Internet through the ISP, but returning > traffic is being directed to our main production facility and the > traffic is being dropped. > > Thank you, > Layne Meier > Atlanta Newspapers > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
