RE: [fw-wiz] Info Request: Looking for alternatives in HA/Load balancing firewalls that are also scalable and modular. . .
- From: "Paul Melson" <pmelson@xxxxxxxxx>
- Date: Fri, 7 Apr 2006 16:06:42 -0400
are also scalable and modular. . .
We're currently spec'ing functional requirements for a new web-basedimplementation of a
number of enterprise apps. One obvious problem is the firewall system: itneeds to be both
load-balancing and high-availability, AND scalable. We're still getting afeel for
potential traffic, but we expect to have a requirement for in-lineexpansion of the system
while remaining online.
Sounds like a big firewall. I'm curious, though, as to why load-balancing
is a requirement. My experience has been that an appropriately-sized single
firewall as part of a fail-over pair is more reliable and performs better
than a comparable load-balanced firewall.
One of the obvious candidates is the Nortel Alteon platform, but thatgetting info on,
also limits us to FW-1. We're nowhere close to downselect on a
platform or a firewall, but I'm looking for alternative platforms to start
so we can make sure the requirements we develop can actually beIMPLEMENTED in reality. . .
If it were me, I'd look at SPLAT with ClusterXL over Alteon. You'll lay out
some dough for load-balancing with ClusterXL, but at least the hardware can
be (relatively) cheap.
The only other firewall vendor I can think of that does (or at least claims
to do) load-balancing is Symantec Enterprise Firewall. However, you may
also want to look at third-party load-balancing solutions like Radware
FireProof or Foundry ServerIron.
firewall-wizards mailing list
- Prev by Date: RE: [fw-wiz] PIX 501 outgoing SMTP problem - (reset-o)
- Next by Date: Re: [fw-wiz] Access to firewalled server via dhcp'd internet connection
- Previous by thread: Re: [fw-wiz] Info Request: Looking for alternatives in HA/Load balancing firewalls that are also scalable and modular. . .
- Next by thread: RE: [fw-wiz] Info Request: Looking for alternatives in HA/Load balancing firewalls that are also scalable and modular. . .