Cluster vs High Availability (VRRP): 1) Clustering lets you scale to many firewalls doing the work of one. HA only permits one at a time.
2) Troubleshooting HA is simple (you only need to look at the master), Troubleshooting Clustered becomes complex because you need to look at -all- firewalls at the same time. 3) For true failover, Clustered requires three firewalls, HA requires only two. 4) Each firewall, no matter how deployed, requires a Checkpoint Enforcement point license. Clustered Environments in a true failover mode require three licenses per "logical firewall", HA requires only two. My two cents: For almost all deployments, HA makes more sense than Clustering. Clustering is neat, its cool, its spiffy, but it's not without its caveats. I can't overlook those when troubleshooting multiple "logical" enforcement points at the same time.. its much easier to snoop two firewalls than it is six... -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] S.CHECKPOINT.COM] On Behalf Of Adriano Dias Leite Sent: Thursday, March 18, 2004 5:13 AM To: [EMAIL PROTECTED] Subject: [FW-1] Nokia Ip Cluster vs VRRP Hi All.. What are the advantages or disadvantages for using Nokia Ip Cluster vs VRRP? Is the change from VRRP to IP Cluster a painful process? Where can I find more informations and how-tos to Ip Clustering? Thank you! Adriano Dias Security Analyst ( 3457-2205 �9647-3919 ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
