Re: For firewalls, what`s best? Load-Sharing or High-Availability?

[Mark Teicher <mark.teicher () gmail com>]

actually depending on the architecture and policy configuration if one were to switch to another firewall, most likely 
the conversion will be very painful in a full production environment. From a Checkpoint to Cisco, the transitional 
downtime when cutting over in my experience has been no less than 4 hours, and then several weeks of pain of 
troubleshooting firewall policies that some other architect forgot to document. a transformation should be well 
documented from design to operational deployment otherwise a consulting company will take 2-3 years to even transition 
:)



On Jul 8, 2011, at 7:16 PM, PEra (MLS) <lists () sevenlayers org> wrote:

> On Fri, 8 Jul 2011 19:59:38 GMT
> hosts.deny () gmail com wrote:
>
> > I`m working with a customer that uses Checkpoint Firewalls and he
> > wants to know what`s the best for their environment, is it
> > Load-Sharing or High-Availability ?
>
> In my experience, Active/Passive works much more reliable than
> Active/Active. 
>
> > Actually, they have 3 cluster of HA firewalls that are one on
> > Internet, another for Users and another one for the DMZ. Is it a good
> > topology ?
>
> That depends on their traffic patterns. Could be okay, could be screwd
> up. But it's hard to tell with the little info you gave.
>
> > What do you think buddies?
>
> About Checkpoint in general? Throw them out. :) Their time's up.
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------