3 firewalls configurations

Hi,

I want to know if it possible to have a configuration with 3
firewalls, with two actives and one backup, without uses
load balancers:

For two firewalls we use vrrp but for more .... firewall
load balancing, but any other solution ?

Any functionnalities on checkpoint or firewall standards,
...?

Regards

rar

 Créez votre adresse électronique prénom.nomlaposte.net 
 1 Go d'espace de stockage, anti-spam et anti-virus
intégrés.



Scanned by Check Point Total Security Gateway.


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

rar.mail wrote:
| Hi,
|
| I want to know if it possible to have a configuration with
3
firewalls, with two actives and one backup, without uses
load balancers:
|
| For two firewalls we use vrrp but for more .... firewall
load
balancing, but any other solution ?
|
| Any functionnalities on checkpoint or firewall standards,
...?

There is no easy solution. At present external loadbalancers
would be
the best way to solve this but will require 3 licenses for
the gateways
and the costs of the load balancing hardware.

Doing some extremely complex VRRP configuration might get
you close but
it will depend a lot on your exact setup.

Hugo.

- --
hvdkooijvanderkooij.org               http://hugo.vanderkooij.
org/
PGP/GPG? Use: http://hug
o.vanderkooij.org/0x58F19981.asc

	A: Yes.
	>Q: Are you sure?
	>>A: Because it reverses the logical flow of
conversation.
	>>>Q: Why is top posting frowned upon?

Bored? Click on http://spamornot.org/ and
rate those images.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFH6T1xBvzDRVjxmYERAhv7AJ9ewdCnt8vm3dPPunEsHZTXIde1OQCf
Tk88
XH2XW54BmcHiMzGaM3LGO/U=
=/hMO
-----END PGP SIGNATURE-----

Scanned by Check Point Total Security Gateway.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

>
> There is no easy solution. At present external
loadbalancers would be
> the best way to solve this but will require 3 licenses
for the gateways
> and the costs of the load balancing hardware.
>


And what happened to stonesoft's StoneBeat FullCluster?
I remember my old days on checkpoint over Solaris, this
product performed
really well. Having a node stopped from the cluster and some
sort of
script-magic could do the job...

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

hi,

is there any special reason for doing that?

in nokia clustering you can for example manually 
assign the load to cluster-nodes. so if you set 
load to 100 / 100 / 1 the node with load 1 will 
normally not get a single connection.

br
reinhard

At 15:40 25.03.2008, rar.mail wrote:
>Hi,
>
>I want to know if it possible to have a 
>configuration with 3 firewalls, with two actives 
>and one backup, without uses load balancers:
>
>For two firewalls we use vrrp but for more .... 
>firewall load balancing, but any other solution ?
>
>Any functionnalities on checkpoint or firewall
standards, ...?
>
>Regards
>
>rar
>
>  Créez votre adresse électronique prénom.nomlaposte.net
>  1 Go d'espace de stockage, anti-spam et anti-virus
intégrés.
>
>
>
>Scanned by Check Point Total Security Gateway.
>
>
>=================================================
>To set vacation, Out-Of-Office, or away messages,
>send an email to LISTSERVamadeus.us.checkpoint.com
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http:
//www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your
>subscription options, email
>fw-1-ownerts.checkpoint.com
>=================================================

-- 
Reinhard Stich          r.stichinternet-security.at
Internet Security AG,      1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 


Scanned by Check Point Total Security Gateway.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================