Yes the load balancing did not work on your network, but if I remember it was due to your proxy server. The Fortigate saw all outbound web traffic from one IP address and made the assumption it was from one client and routed all the traffic out only one interface. That was to solve an issue that would break https connections if the traffic for a session came from two different IP addresses. The Sonicwall was able to work around that issue where the Fortigate could not. With the traffic coming from all the different workstation IP addresses the Fortigate can Load Balance between circuits. (At least that is what the directions say)
From: Pearson, Jeremy Sent: Thursday, January 29, 2009 8:59 AM To: info-tech@aea8.k12.ia.us Subject: RE: [info-tech] Handling Internet No, the problem with the Fortigate was that it would not load balance. The failover worked, but the Fortigate would only route traffic via subnet. It would not load balance over the two links. We needed both the 10 MB of bandwidth and failover. While the Fortigate would provide the failover, the load balancing part was not there. Jeremy -------------------------------------------------------------------------------- From: info-tech-ow...@aea8.k12.ia.us [mailto:info-tech-ow...@aea8.k12.ia.us] On Behalf Of Scott Fosseen Sent: Thursday, January 29, 2009 8:41 AM To: info-tech@aea8.k12.ia.us Subject: Re: [info-tech] Handling Internet You can also use the Fortigate 60 Firewall. It comes with Dual WAN support. Actually Jeremy may sell you a Fortigate 100. Fort Dodge had a issue with the Load Balancing on the Fortigate, but it was due to all their web traffic going through an internal proxy. The Fortigate logic would route all traffic from an IP address to a single ISP to ensure there would be no problems at the remote end putting the packets back together. From: Richardson,Tony Sent: Thursday, January 29, 2009 8:32 AM To: info-tech@aea8.k12.ia.us Subject: RE: [info-tech] Handling Internet Thanks for your help. I will look into the Enhanced Sonicwall 3060 From: info-tech-ow...@aea8.k12.ia.us [mailto:info-tech-ow...@aea8.k12.ia.us] On Behalf Of Pearson, Jeremy Sent: Thursday, January 29, 2009 8:28 AM To: info-tech@aea8.k12.ia.us Subject: RE: [info-tech] Handling Internet We have a 5 MB Ethernet connection from Frontier, our local telco, with 28 ip addressed on it. -------------------------------------------------------------------------------- From: info-tech-ow...@aea8.k12.ia.us [mailto:info-tech-ow...@aea8.k12.ia.us] On Behalf Of Richardson,Tony Sent: Thursday, January 29, 2009 8:20 AM To: info-tech@aea8.k12.ia.us Subject: RE: [info-tech] Handling Internet Assuming AEA is one vendor who is the other? From: info-tech-ow...@aea8.k12.ia.us [mailto:info-tech-ow...@aea8.k12.ia.us] On Behalf Of Pearson, Jeremy Sent: Thursday, January 29, 2009 8:07 AM To: info-tech@aea8.k12.ia.us Subject: RE: [info-tech] Handling Internet Tony- We are currently using our Sonicwall 3060 with Enhanced Firmware to provide load balancing between two 5 MB circuits from two different Internet providers. All works pretty well. My only complaint is that once you do have a failover (for whatever reason) the Sonicwall will turn it off and work just as you think it should, until the circuit comes back up. The only problem is that it will not start load balancing again over the failed link. It still relies heavily on the link that stayed up, until you do a reboot of the firewall, and then everything goes back to normal. It is not a big deal, and since it took care of the whole reason we installed it, I am fine with that. We just reboot the firewall at some point late in the day, and all returns to normal. Not much to see, but feel free to run over and check it out, or ask any questions. Jeremy -------------------------------------------------------------------------------- From: info-tech-ow...@aea8.k12.ia.us [mailto:info-tech-ow...@aea8.k12.ia.us] On Behalf Of Richardson,Tony Sent: Thursday, January 29, 2009 5:02 AM To: info-tech@aea8.k12.ia.us Subject: [info-tech] Handling Internet Hello All, As the internet becomes more critical to daily instructional needs such as the use of online applications how is everyone handling their internet failover. Is there anyone using two different vendors to provide internet failover? What hardware/software are you using for this? Thanks, Tony Richardson, Technology Coordinator Humboldt Community School District trichard...@humboldt.k12.ia.us
