Hi !
I'm currently trying to setup a pair of FW-1 v4.1 on Ultra 10 Solaris
7. Stonebeat full cluster v2.0 solution is used to cater for HA and load
balancing. FW-1 gui on a NT machine.
From what is understood, distributed installation allows mgmt and firewall
modules to be separated. However, could they be installed on the same
machine using the distributed option ?? Are there any config files that
can be edited ??
Due to some constraints, I'm hoping to install the following using
distributed installation
Machine A (Sol 7 ) Machine B (Sol 7) Machine C (NT)
--------------------------- --------------------------
------------------------------
Mgmt Module (Main) Mgmt Module (Standby) FW-1 GUI
Firewall Module Firewall Module Stonebeat Full cluster control
Firewall modules on both Machine A & B will treat Mgmt-Main (A) as the
Master and retrieve config files from it. However in the event that
Machine A fails and Mgmt-Main is down. Firewall module on machine B can
get policies from Mgmt-Standby which is on the same machine.
Problem is :
There doesn't seem to be a segregation of installation of modules on a same
machine. For distributed installation, cpconfig menu would either be for
the mgmt server or enforcement point. For standalone, there doesn't seems
to be any options where i can specify additional masters.
If the above configuration doesn't work, it would mean 2 extra machines for
mgmt servers. Increase in cost but with limited budget.
Please do advise, any other suggestions are very much appreciated.
Thanks in advance.
Rgds,
Patricia
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
