Re: Q:High Performance/ High Availability Firewalls

[Dean_Ethier () dmr ca]

Uwe, you might want to look at either the Nokia IP4xx line of routers
(running an embedded copy of FW1 or maybe the Cisco PIX).  Both, I believe,
have the capability to handle ATM pipes and bothe definately have thier own
HA options.

Dean Ethier
DMR Consulting Group Inc




Uwe Zirpner <Uwe.Zirpner () rsw sni de> on 10/26/98 11:20:02 AM

Please respond to Uwe Zirpner <Uwe.Zirpner () rsw sni de>

To:   firewall-wizards () nfr net
cc:    (bcc: Dean Ethier/DMR/CA)
Subject:  Q:High Performance/ High Availability Firewalls




Hey folks,
I'm searching for more information about High Performance Firewalls
e.g. in an ATM network environment or setting up an expandable load
balancing firewall ( e.g. parallel firewall ).

I just read two interesting papers of Uwe Ellermann & CO.( DFN )
about this topic, but does anybody has had already some experience in
implementing such a firewall.

Which system requirements should the firewall hardware have to handle
the ATM Traffic througput ( e.g RAM, Processors )

The site has roughly 2000 Users, mainly classic WWW/FTP/MAIL traffic.
The firewall should have minimum 4 network cards.
- Internet, Internal net, dmz, extranet

As far as High Availability is concerned,
I would like to combine the "Load Balancing topic" with this topic.
Is this possible ? Any recommendations, NOT TO DO

For High Availability
 I only know StoneBeat for Firewall 1. Are there any other products
or concepts for other "Well Known Firewall Products" out there ??

TIA Zirpini