Its my understanding that HA for ISS sensors can either be one hot, one cold standby or two hot sensors (both seeing the traffic at the same time). In the Active/Active configuration there is no failover if one sensor fails. You just have both working simultaneously. Where would your sensors be in the diagram below? Using a span port on the 6500's or configured as inline devices between the PIX's and 6500's?
Scott Hazel "Bill Wharton" <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 06/27/2006 11:04 AM To <[email protected]> cc Subject [ISSForum] PROVENTIA HA Has anybody deployed the ISS sensors in a high-availability configuration before? I need to set one up and wondering if this topology would work. Internet switch ---- (2) PIX firewalls ---- (2) 6500 switches I have each PIX firewall connecting to a 6500 switch. The PIX firewalls are in an active/standby setup with only one firewall passing traffic at all times. Thank you _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328. _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
