RE: Checkpoint High Availability & VRRP?

G'day Warren (And thanks to everyone else for their replies!),
 
Thanks for the offer - I would have been interested - however Nokia came
back with pricing that was very attractive - So we're no longer looking
@ SPlat.  
 
With regards to monitoring the upstream router - basically we want to
implement VRRP so that if either link fails, the firewall can fail-over
to the either link.   We're not looking to do load balancing of the
traffic.

Cheers,
 
matt

 
 -----Original Message-----
From: Warren Verbanec 
Sent: Thursday, December 02, 2004 11:53 AM
To: 'Lowth, Matt'; 'firewalls@securityfocus.com'
Subject: RE: Checkpoint High Availability & VRRP?


Hello,
 
Check Point only does their ClusterXL protocols- no VRRP on SPLAT. No
plans to, either.  Resilience (the company I work for) does serious
hardware High Availability, monitoring everything from the driver to the
kernel to the app via an onboard PCI-X card. 
 
Not to sound too much like the Sales Engineer that I am... I think that
we might be able to address your needs quite well. 
 
I'm curious, though- it seems that the distinction that you're making is
that you want to monitor network state as well as application state-
which only really means that you want to ensure that the upstream switch
is able to pass traffic between the firewalls (this is all that VRRP
really does)...do you want to monitor the upstream router as well?
 
-Warren Verbanec
Resilience Corporation
West Coast Sales Engineer
+1(650)996-1003

-----Original Message-----
From: Lowth, Matt [mailto:LowthM@tabcorp.com.au]
Sent: Sunday, November 28, 2004 2:00 PM
To: 'firewalls@securityfocus.com'
Subject: Checkpoint High Availability & VRRP?


G'day,
 
I was wondering if anyone knew whether or SPLAT supports VRRP, and if
not, is there any planned support?  

I'm asking because I'm looking to implement a high availability WAN with
redundant links & firewalls, however, to the best of my knowledge,
ClusterXL only handles firewall redundancy.
 
Is there any other products besides a Nokia appliance which will either
support VRRP or an equivalent link redundancy protocol?
 
FYI - In case anyone asks, I'm plugging straight into Ethernet, so
there's no Cisco router to do HSRP either.
 
Thanks In Advance,
 
Cheers,
 
Matt

 


************************************************************************
***********
The information in this e-mail message and any files transmitted with it

are intended to be confidential and for the use of only the individual
or 
entity to whom they are addressed. The message and files may be
protected by legal professional privilege, or other legal rules. The 
confidentiality of and privilege applying to this message and 
files is not waived if this message or files has been sent to you by
mistake. 
If the reader of this message or files is not the intended recipient,
you are 
notified that retention, distribution or copying of this message and
files are 
strictly prohibited. If you receive this message or files in error,
please 
notify us immediately by telephone or return e-mail and delete all
copies 
from your computer system. It is the recipient's responsibility to check
this 
message and files for viruses.

Thank you.
************************************************************************
***********




*******************************************************
PLEASE NOTE: This internet email message
has been checked for viruses and appropriate
content to ensure it complies with TABCORP's
electronic communication policy.
*******************************************************



***********************************************************************************
The information in this e-mail message and any files transmitted with it 
are intended to be confidential and for the use of only the individual or 
entity to whom they are addressed. The message and files may be
protected by legal professional privilege, or other legal rules. The 
confidentiality of and privilege applying to this message and 
files is not waived if this message or files has been sent to you by mistake. 
If the reader of this message or files is not the intended recipient, you are 
notified that retention, distribution or copying of this message and files are 
strictly prohibited.  If you receive this message or files in error, please 
notify us immediately by telephone or return e-mail and delete all copies 
from your computer system. It is the recipient's responsibility to check this 
message and files for viruses.

Thank you.
***********************************************************************************