Great Circle Associates Firewalls
(March 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Firewall high availability Strategy
From: "Michael Cunningham" <Michael . Cunningham @ voicenet . com>
Organization: Paranet
Date: Mon, 17 Mar 1997 01:30:26 +0000
To: Firewalls @ greatcircle . com
Comments: Authenticated sender is <malice @ popmail . voicenet . com>
Reply-to: malice @ voicenet . com

> Level 3.  Stonebeat keep alive software with dual FireWall-1 installations
> in parallel. The Stonebeat element monitors primary FW from secondary. If
> it detects outage it renumbers ports on secondary to be same as old primary
> (IP address *and* MAC address).  The advantage is that the network does not
> have to learn new routes. Convergance time we have tested to less than 5
> seconds. With FW-1 3.0 state is maintained across both firewalls. An
> authenticated session sees only a five second delay. You *do not* have to
> re-authenticate.

You also can use Qualix High Avaliability software. I have used it 
before and it does a VERY nice job..

Check it out at http://www.qualix.com

Enjoy...Mike

------------------------------------------------------------------
| Michael Cunningham                 Email: mjcunnin @
 paranet .
 com |
| Technical Analyst                  Pager: 800-714-8985         |
| Paranet - Integrating Hardware, Software, Networks, and People.|
------------------------------------------------------------------


Follow-Ups:
Indexed By Date Previous: Re: Firewall high availability Strategy
From: Richard Stiennon <richards @ netrex . com>
Next: NT Information
From: "Sandra Jaque F." <sjaque @ arauco . reuna . cl>
Indexed By Thread Previous: Re: Firewall high availability Strategy
From: Roger Young <youngr @ erinet . com>
Next: Re: Firewall high availability Strategy
From: Andreas Siegert <afx @ ibm . de>

Google
 
Search Internet Search www.greatcircle.com