Firewall-1

[FW-1] Active/Standby NICs for Provder-1 SPLAT NGx R60?

Subject: [FW-1] Active/Standby NICs for Provder-1 SPLAT NGx R60?
From: cisco4ng <cisco4ng AT YAHOO DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Fri, 26 Aug 2005 06:41:07 -0700
I have a few questions for those who use Checkpoint Provider-1:
 
1) I've been told my CP Sale Engineer a year ago that you can
have Provider-1 Managers & Containers running on different platforms
staring with NGx.  For example, I can have the Primary Manager+Container 
running on Solaris while the Secondary Manager+Container running on SPLAT.
After reading the NGx documentation, that is apparently NOT the case.
Is this another "vaporware" from Checkpoint yet again?
 
2) In a large Enterprise or Service Providers environment, we have
redundancies requirements at layer 2 (switch) level.  What it means 
is that the server will have two NICs connected two different switches.
In case one of the switches goes down, the server will not lose 
connectivity.  IBM, Dell and HP use Active Fault Tolerant (AFT) so 
that one of the NICs will be in Active while the other NIC will be
in standby mode.  The two NICs will be seen as one virtual NIC from the
OS perspective.
 
I've been told that checkpoint does NOT support NIC teaming.  
Is this still true in NGx?  We have requirements that all Backend
Operations must have redundancies at layer 2 level.  I understand about
Primary/Secondary Manager+Containers and HA in Provider-1 and also
Active/Standy CMA but I do not want to deploy more servers than necessary.
I just want checkpoint to be able to support Active/Standby NICs on 
SPLAT.
 
Why can't CP realize this and start support this configuration?
 
Anyone care to comments?
 
cisco4ng

                
---------------------------------
 Start your day with Yahoo! - make it your home page 

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>
  • [FW-1] Active/Standby NICs for Provder-1 SPLAT NGx R60?, cisco4ng <=