Re: Content Switches [7:44742]
If your not using the CSS to load balance between firewalls I see now reason to put it outside. The CSS constantly sends keepalives to the servers it load balances for. I don't see any reason the packets should be inspected by the firewall. If the firewall gets overloaded and drops packets the CSS will mark some services as down or dying and will not send requests to that server even though it could handle the requests. ""Jason Forrester"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > All, > > I have a quick question regarding content switches. Should the content > switched be placed inside or outside of a firewall. I can not find any > documentation to support which is better. > > Thanks, > > Jason Forrester > CCIE 8748 Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=44748&t=44742 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Content Switches [7:44742]
My understanding is that for firewall loadbalancing they are installed on the inside and outside otherwise they are most often installed on the DMZ. Dave Jason Forrester wrote: > > All, > > I have a quick question regarding content switches. Should the content > switched be placed inside or outside of a firewall. I can not find any > documentation to support which is better. > > Thanks, > > Jason Forrester > CCIE 8748 -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 "Emotion should reflect reason not guide it" Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=44751&t=44742 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Content Switches [7:44742]
It should be inside to the firewall...near to your servers. Kind Regards /Thangavel 186K Reading,Brkshire Direct No -0118 9064259 Mobile No -07796292416 Post code: RG16LH www.186k.co.uk -- The greatest glory in living lies not in never falling, but in rising every time we fall ." -- Nelson Mandela "Jason Forrester" To: [EMAIL PROTECTED] Fax to: Sent by: Subject: Content Switches [7:44742] nobody@groups tudy.com 22/05/2002 20:40 Please respond to "Jason Forrester" All, I have a quick question regarding content switches. Should the content switched be placed inside or outside of a firewall. I can not find any documentation to support which is better. Thanks, Jason Forrester CCIE 8748 ** This e-mail is from 186k Ltd and is intended only for the addressee named above. As this e-mail may contain confidential or priveleged information, if you are not the named addressee or the person responsible for delivering the message to the named addressee, please advise the sender by return e-mail. The contents should not be disclosed to any other person nor copies taken. 186k Ltd is a Lattice Group company, registered in England & Wales No. 3751494 Registered Office 130 Jermyn Street London SW1Y 4UR ** Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=44799&t=44742 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]