Assymetric Routing / Statefull Inspection Firewall

Chris Brenton cbrenton at chrisbrenton.org
Wed Mar 17 10:57:30 UTC 2004


On Tue, 2004-03-16 at 21:27, Mike Turner wrote:
>
>             I am currently looking for a statefull inspection firewall
> that support asymmetric routing – is there such a product?

Sounds like you are looking for an SI firewall that supports full load
balancing, not just high availability. FW-1 does this, there may be
others as well.

Keep in mind that you can run into connectivity issues if you have big
pipe connections. You end up in a situation where outbound packets can
cross one firewall and replies can hit the other before the state info
has had time to sync. 

Beyond that, it should fit your need.
Chris





More information about the NANOG mailing list