Great Circle Associates Firewalls
(November 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Redundant FW-1s in Parallel!?
From: Matthew Howard <mhoward @ cisco . com>
Date: Wed, 27 Nov 1996 09:40:32 -0800
To: Dave Roberts <djr @ saa-cons . co . uk>, David Helms <david . helms @ checkpoint . com>
Cc: Firewalls Mailing List <Firewalls @ GreatCircle . COM>

At 12:51 PM 11/27/96 +0000, Dave Roberts wrote:
>On Tue, 26 Nov 1996, David Helms wrote:
>
>> That "State-Sharing" protocol was announced as a feature of the V3.0
>> release of FireWall-1. 
>
>How does the software share the state information?  ie what kind of
>protocol over what kind of medium.  Is it encrypted and/or authenticated?

sharing session state is very complex problem.  We support failover in the
PIX FW, which is of the same mind-set has HSRP.  We have some ideas on
sharing state, but as you have pointed out that is a very complex issue.

couple this is with user authenticationand the issue becomes bigger...

Matt
>
>--
>Dave Roberts          For PGP Key - send mail with subject of 'get pgp':-
>Senior Unix Admin     < 51 4B 6A 35 3F C4 B6 3D  13 88 0C B2 48 61 51 1C >
>SAA Consultants Ltd   Std disclaimer applies, it's nothing to do with them
>Plymouth, UK.         Tel: +44 1752 606000   Fax: +44 1752 606838
>
>
>
>


   Matthew Howard   
   Product Line Manager               mhoward @
 cisco .
 com
   Internet Business Unit             408-526-4720 (voice)
   Cisco Systems Inc.		      408-527-8122 (fax)
   170 West Tasman Drive  
   Building VM2 (corner of First & Vista Montana)                             
   San Jose, CA 95134


Indexed By Date Previous: Re: Firewall Training Courses
From: Brent Chapman <Brent @ GreatCircle . COM>
Next: IP numbers end
From: "Sergio Untiveros" <suntiver @ mem . gob . pe>
Indexed By Thread Previous: RE: Redundant FW-1s in Parallel!?
From: "A. Ömer Köker" <omer @ superonline . net>
Next: Re: Redundant FW-1s in Parallel!?
From: Bill Husler <Bill @ Husler . xo . com>

Google
 
Search Internet Search www.greatcircle.com