Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | RE: Check Point ClusterXL Load Sharing VPN |
|---|---|
| Date: | Wed, 17 Nov 2004 00:35:37 +1100 |
Hi Rob, Thanks for your reply. I've heard that this issue does primarily affect connectivity to Cisco devices. Is anyone else aware of whether it affects any other devices? Netscreens etc? Thanks. Jason -----Original Message----- From: Rob Hughes [mailto:rob@robhughes.com] Sent: Sunday, 14 November 2004 7:33 AM To: firewalls@securityfocus.com Subject: Re: Check Point ClusterXL Load Sharing VPN On Sat, 2004-11-13 at 03:05 +1100, Jason Ha wrote:
Hey Gang, Does anyone know whether there's still an issue with VPNs through a ClusterXL setup in Load Sharing mode? Are people still being forced to
use HA mode for the VPN to work properly? Not much info on the Check Point sites.
No one has ever been "forced" to use HA for FW-1 clusters when doing VPN. The issue is that many devices, most notably Cisco, can't deal with two SAs for the same IP address. Some devices can, and those are fully compatible with ClusterXL and VPNs when run in LS mode.
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: Pix 515's fail to failover, Spigga |
|---|---|
| Next by Date: | Re: Pix 515's fail to failover, Zachary Spalding |
| Previous by Thread: | RE: Check Point ClusterXL Load Sharing VPN, Robert D Hughes |
| Next by Thread: | ICSA Certified IPTables Firewall?, Paul |
| Indexes: | [Date] [Thread] [Top] [All Lists] |