NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Full Cluster - was RE: [FW1] Using Nokia IP650 as Enterprise firewall??



Please allow me to ask one dumpe question, what is "Full Cluster"?  Is that
like two servers sharing the same disk drive array?

Thanks.

-raymond

At 01:32 PM 1/24/01 -0500, you wrote:
>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>Stonebeat has HA and Full Cluster.
>
>With the Nokias you would need to use a load balancer sandwich
>configuration to acheive clustering (that could be the solution regardless
>of platform even giving you the ability to use multiple platforms if you
>so desired).
>
>
>Carric Dooley
>Senior Consultant
>COM2:Interactive Media
>
>"But this one goes to eleven."
>- -- Nigel Tufnel
>
>
>On Wed, 24 Jan 2001, Raymond N wrote:
>
>> 
>> Thanks for your response.  Does StoneBeat offer load balancing also?
>> 
>> -raymond
>> 
>> At 09:34 PM 1/23/01 -0500, you wrote:
>> >As for the StoneBeat solution, StoneBeat offers and excellent HA solution.
>> >The only problem in this environment is that StoneBeat is not supported
for
>> >the Nokia platform.  You would need to remain with Sun to use the
StoneBeat
>> >product.  
>> >
>> >If you are interested in StoneBeat and need more information, let me know
>> >and I would be happy to provide it.
>> >
>> >Rick McMaster
>> >Sr. Network Security Engineer
>> >ePlus Technology
>> >http://www.eplus.com
>> >Nasdaq: PLUS
>> >
>> >
>> >-----Original Message-----
>> >From: [email protected] [mailto:[email protected]]
>> >Sent: Tuesday, January 23, 2001 5:49 PM
>> >To: Raymond N
>> >Cc: [email protected]
>> >Subject: Re: [FW1] Using Nokia IP650 as Enterprise firewall??
>> >
>> >
>> >
>> >
>> >
>> >Raymond:
>> >
>> >     The Nokia IP650 will definitely handle your load. The IP440 should
also
>> >be
>> >able to handle your load but am not as familiar with the specs on this
>> >machine
>> >(as we use a pair of Nokia IP650s here). On each of our Nokia IP650s we
have
>> >256MB of memory and a PII processor (448MHz). The IP650s will
definitely be
>> >able
>> >to handle your load and then some.
>> >
>> >     As far as VRRP is concerned.... VRRP was developed by Nokia and as
far
>> >as I
>> >know is only implemented on Nokia equipment. It could be possible that it
>> >will
>> >work on other platforms but I do not currently know of any yet and I have
>> >never
>> >heard of anyone implementing it on Sun equipment.
>> >
>> >     As far as an HA environment in regards to Sun equipment is
concerned I
>> >have
>> >heard quite a few people use the Stonebeat Full Cluster product line.
But as
>> >I
>> >have never used this product I am not very familiar with it. Maybe someone
>> >from
>> >this list could comment?
>> >
>> >     As far as a CheckPoint HA setup, since v4.1 SP2? CheckPoint has
>> >encorporated some HA functionality into there code but I have not taken a
>> >look
>> >at it. Since we use VRRP here I have not really looked into this.
>> >
>> >     Now, my opinion is rather biased but the Nokia platforms are a very
>> >solid
>> >box. They are very easy to set up out of the box and are a very
solid/stable
>> >platform. Since you are familiar with Unix (being that your current
machine
>> >is
>> >an Ultra-2 running Solaris 2.x) the jump to a Nokia platform running IPSO
>> >(based
>> >on FreeBSD) would be rather minor.
>> >
>> >     We basically made the jump that you are thinking about now a
couple of
>> >years back and the jump was NOT as traumatic as we had originally
>> >anticipated.
>> >
>> >     Let me know if you would like more input.
>> >
>> >
>> >
>> >
>> >
>> >
>> >
>> >Raymond N <[email protected]> on 01/23/2001 02:32:00 PM
>> >                                                              
>> >                                                              
>> >                                                              
>> >  To:          [email protected]       
>> >                                                              
>> >  cc:          (bcc: James E Clukey/Rush/RSH)                 
>> >                                                              
>> >                                                              
>> >                                                              
>> >  Subject      [FW1] Using Nokia IP650 as Enterprise          
>> >  :            firewall??                                     
>> >                                                              
>> >
>> >
>> >
>> >
>> >
>> >
>> >
>> >Hi there,
>> >
>> >We are currently using Firewall-1 on a Sun Ultra 2 machine.  We have about
>> >2000 workstations and servers behind it.  During the peak period of the
>> >day, we have about 1000 to 1500 connection in the Firewall-1 's Active
>> >session table.  We use both static NAT and hide NAT.  So far, the firewall
>> >machine is doing well and we doesn't notice any load problem.
>> >
>> >Now, my question is if you think the Nokia IP650 (or the IP440) would have
>> >sufficient (CPU, memory, etc.) capacity to replace the Sun Ultra 2 and
>> >handle the current load?  Better?
>> >
>> >Another question is if the VRRP is only available for the Nokia setup, and
>> >not for the Sun Ultra 2 machine?  I guess my question is if the Checkpoint
>> >VRRP solution are built at the Firewall-1 software or at the hardware
>> >(Nokia) platform.
>> >
>> >
>> >Thanks in advance.
>> >
>> >-raymond
>> >
>> >
>> >
>>
>============================================================================
>> >====
>> >     To unsubscribe from this mailing list, please see the instructions at
>> >               http://www.checkpoint.com/services/mailing.html
>>
>============================================================================
>> >====
>> >
>> >
>> >
>> >
>> >
>>
>============================================================================
>> >====
>> >     To unsubscribe from this mailing list, please see the instructions at
>> >               http://www.checkpoint.com/services/mailing.html
>>
>============================================================================
>> >====
>> >
>> >
>> 
>> 
>> 
>>
============================================================================
====
>>      To unsubscribe from this mailing list, please see the instructions at
>>                http://www.checkpoint.com/services/mailing.html
>>
============================================================================
====
>> 
>
>-----BEGIN PGP SIGNATURE-----
>Version: PGP 6.5.1
>Comment: Made with pgp4pine 1.75-6
>
>iQA/AwUBOm8fwVUqWOkDpMZ2EQLu+wCeJTQtRFSAYv1Pax87MebEXulMh9MAoJUZ
>AthfdFdX9ZpYzeLZPyehL2p+
>=Glq6
>-----END PGP SIGNATURE-----
>
>
>
>



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.