Suppose someone wants a FW-1, but he also has a requirement for "no single
points of failure." Suppose he thought he could address this by putting two
FW-1s in parallel as follows...
|----- Primary FW-1 -----|
| |
Dept #1 -----| |-----Dept #2
| |
|----- Secondary FW-1 ---|
It seems to me that there could be problems with this topology (with both
FWs powered and connected). Since a packet could take either FW route to
get to (for example) Dept #2 from Dept #1, context could be lost and packets
could be lost. I know all this is pretty general, and what happens depends
on the protocols and rules. Still, I'm just looking for a general answer.
Any suggestions on how to best satisfy this type of requirement?
Tia,
Jeff
Follow-Ups:
|
|
