[68808] in North American Network Operators' Group
Re: Assymetric Routing / Statefull Inspection Firewall
daemon@ATHENA.MIT.EDU (Chris Brenton)
Wed Mar 17 05:56:55 2004
From: Chris Brenton <cbrenton@chrisbrenton.org>
To: nanog@nanog.org
In-Reply-To: <000001c40bc7$56f39d20$6401a8c0@msthome>
Date: Wed, 17 Mar 2004 05:57:30 -0500
Errors-To: owner-nanog-outgoing@merit.edu
On Tue, 2004-03-16 at 21:27, Mike Turner wrote:
>
> I am currently looking for a statefull inspection firewall
> that support asymmetric routing – is there such a product?
Sounds like you are looking for an SI firewall that supports full load
balancing, not just high availability. FW-1 does this, there may be
others as well.
Keep in mind that you can run into connectivity issues if you have big
pipe connections. You end up in a situation where outbound packets can
cross one firewall and replies can hit the other before the state info
has had time to sync.
Beyond that, it should fit your need.
Chris
