[FW1] Using load balancing object and address translation

["Frank Bonini" <frankb@FW1-NOSPAMemoneyadvisor.com>]

I need to bring a second web server online behind a single firewall.
I'm running FW-1 4.1 SP 3.  I'm looking at alternatives to doing this
and for now would like to avoid the hardware load balancing route (this
is a preliminary deployment until we bring our data center up where
we'll use Alteon).  
 
One choice is to use Windows Load Balancing which would be fine except
that I have to buy Advanced Server licenses to do that.  This is not out
of the question but is not desirable either.  I want to explore using
the load balancing object in FW-1 instead.  My current network looks
like this:
 
(In the following description, internal mask is 255.255.255.0.)
 
Firewall has 2 NICs (obviously):
    External NIC has a public address assigned by ISP.
    Internal NIC uses private address (172.16.10.n)
 
Web Server(s) have 2NICs (routing is disabled):
    NIC1 is on 172.16.10.n
    NIC2 is on 172.16.20.n
 
DB Server has 2 NICs (routing is disabled):
    NIC1 is on 172.16.20.n
    NIC2 is on our internal corporate network.
 
I am not a FW-1 expert so I'm looking for some guidance on how to setup
the Load Balancing object to work in conjunction with the address
translation in this configuration.  Appreciate as much detail or
pointers to white papers or online docs that would help.
 
thanks in advance for any assistance.
 

Frank Bonini

Vice President 

Operations and Security

eMoney Advisor Inc.================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================