Firewall-1

Re: [FW-1] SecurePlatform: Interface Layout

Subject: Re: [FW-1] SecurePlatform: Interface Layout
From: Alan Choyna <achoyna AT PATHF DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Thu, 15 Dec 2005 11:48:38 -0600
Better to use the external cards for all connections if possible due to ease of repair if the internal eth ports need repair as compared to just swapping out a card if one of Intel cards ports goes bad.

Regarding your traffic volume, will to be running backups via the firewall interfaces? If so, your traffic will spike heavily during those times. Bandwidth should not affect your interface selection as the internal ethernet ports are as fast as the Intel Nics, however it will definitely affect what which you connect them to (10/100 or 1000).

Al


At 10:10 AM 12/15/2005, Shane Presley wrote:
Hello,

We have a Dell 2800 with 4 Intel 10/100/1000 quad cards installed.
That means we have 16 gigabit interfaces from the Intel cards, and 2
onboard gigabit interfaces.

This is done mostly for segration of traffic and convenience purposes.
 No single interface is really pushing that much traffic.  Maybe 10mb
at most.

However, is there any logic I should use to layout my interfaces?  For
example, should I put my most heavily used interfaces on the onboard
NICs?  Any other suggestions?

(This is a CheckPoint NGX firewall running SecurePlatform)

Thanks
Shane

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>