Great Circle Associates Firewalls
(November 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Redundant FW-1s in Parallel!?
From: David Helms <david . helms @ checkpoint . com>
Organization: CheckPoint Software Technologies
Date: Wed, 27 Nov 1996 11:04:47 -0600
To: Dave Roberts <djr @ saa-cons . co . uk>
Cc: Firewalls @ GreatCircle . COM
References: <Pine . A32 . 3 . 95 . 961127124717 . 34887A-100000 @ haddock . saa-cons . co . uk>
Reply-to: david . helms @ checkpoint . com

Dave,

See my comments below....

Dave Roberts wrote:
> 
> On Tue, 26 Nov 1996, David Helms wrote:
> 
> > That "State-Sharing" protocol was announced as a feature of the V3.0
> > release of FireWall-1.
> 
> How does the software share the state information?  ie what kind of
> protocol over what kind of medium.

The state sharing protocol is a TCP-protocol that falls within the group
of what are considered FW-1 control protocols.

>  Is it encrypted and/or authenticated?

Yes and yes, based on the same mechanism as other FW-1 control
protocols.

David
> 
> --
> Dave Roberts          For PGP Key - send mail with subject of 'get pgp':-
> Senior Unix Admin     < 51 4B 6A 35 3F C4 B6 3D  13 88 0C B2 48 61 51 1C >
> SAA Consultants Ltd   Std disclaimer applies, it's nothing to do with them
> Plymouth, UK.         Tel: +44 1752 606000   Fax: +44 1752 606838

-- 
__________________________________
 David Helms
 Senior Technical Consultant
 CheckPoint Software Technologies
 ph 703.684.4824
 fx 703.684.4847
 davidh @
 checkpoint .
 com
__________________________________


References:
Indexed By Date Previous: IP numbers end
From: "Sergio Untiveros" <suntiver @ mem . gob . pe>
Next: IBM SNG and tripwire
From: <shayhoff @ VNET . IBM . COM>
Indexed By Thread Previous: Re: Redundant FW-1s in Parallel!?
From: Dave Roberts <djr @ saa-cons . co . uk>
Next: Re: Redundant FW-1s in Parallel!?
From: shiggins @ naccess . com (Sean higgins)

Google
 
Search Internet Search www.greatcircle.com