On Sun, 24 Nov 1996 20:39:19 -0800, you wrote:
>Suppose someone wants a FW-1, but he also has a requirement for "no single
>points of failure." Suppose he thought he could address this by putting two
>FW-1s in parallel as follows...
>
> |----- Primary FW-1 -----|
> | |
>Dept #1 -----| |-----Dept #2
> | |
> |----- Secondary FW-1 ---|
>
>It seems to me that there could be problems with this topology (with both
>FWs powered and connected). Since a packet could take either FW route to
>get to (for example) Dept #2 from Dept #1, context could be lost and packets
>could be lost. I know all this is pretty general, and what happens depends
>on the protocols and rules. Still, I'm just looking for a general answer.
>Any suggestions on how to best satisfy this type of requirement?
I recently heard this will be supported on Firewall-1 version 3.0...
Sean
Sean Higgins -- "Always count your advantages!"
References:
|
|
