Re: SunScreen Lite vs. IPF.

From: Valerie Anne Bubb (bubbva@usps.eng.Sun.COM)
Date: 08/13/01


Message-Id: <200108131656.JAA24088@eunuchs.eng.sun.com>
Date: Mon, 13 Aug 2001 09:56:35 -0700 (PDT)
From: Valerie Anne Bubb <bubbva@usps.eng.Sun.COM>
Subject: Re: SunScreen Lite vs. IPF.
To: focus-sun@securityfocus.com, tanwy@comp.nus.edu.sg


>From: Tan Wee Yeh <tanwy@comp.nus.edu.sg>
>
>I would like to know the following:
> - SunScreen lite's README says that is "Cannot be a member of a
> HA cluster". Does this refer to the configuration of HA
> firewall or the more general HA setup like provided with Sun
> Cluster 3.0?? We are going to run the machines with Cluster3
> so this is of fundamental importance.

No, this refers to a SunScreen HA cluster. The SunScreen HA
feature is only available in the full product. Since you're
using this for host based, not perimeter, you probably wouldn't
want this feature anyways.

Valerie
SunScreen Development

--
Public SunScreen Discussion Forum:
http://supportforum.sun.com/cgi-bin/WebX.cgi?/security.sunscreen



Relevant Pages

  • Re: vaxcluster vms v5.5-2 and v7.3
    ... For OpenVMS Version 6.2 nodes to participate in a cluster with systems ... running either Version 7.1 or Version 7.2, the cluster compatibility kit ... For more information about these kits, refer to the OpenVMS Version 7.2 ... For more information, refer to the OpenVMS ...
    (comp.os.vms)
  • Re: RPC/HTTPs : problem of configuration?
    ... You refer to FQDN of the front-end or the name of cluster? ...
    (microsoft.public.exchange.admin)
  • Re: Clustering WIN2K3 PDC server
    ... Are you referring to setting up cluster nodes as domain controllers or running a domain controller using a clustered virtual group? ... The former is typically discouraged (refer to http://technet2.microsoft.com/windowsserver/en/library/16a8fa56-8de9-4ea5-9c66-33605823bbc71033.mspx?mfr=true and http://support.microsoft.com/kb/281662 for caveats), and you should stay away from the latter, considering that cluster requires domain controller to operate... ...
    (microsoft.public.windows.server.clustering)
  • Re: BQ: LACE abilities
    ... same name but coming from different clusters. ... adapt other_cluster: rename X as XX; another_cluster: rename X as XXX; a_third_cluster: ignore end ... This renames classes with the same name in different clusters so that the original cluster can refer to them both with different names, ...
    (comp.lang.eiffel)
  • [SUMMARY: Deleting a member node from TruCluster]
    ... to remove the member upon which the cluster software was ... Now my problem is what to do if I need to remove the master node? ... It is possible to delete any non-running member of the cluster from any ... from the original installation, and by default would have chosen member 1 as ...
    (Tru64-UNIX-Managers)