I'm looking for a firewall appliance that supports high availability and spanning tree.

I have two ha-cluster nodes and I'd like to protect them with a firewall. To avoid a single point of failure, I'd like to have two ha-capable firewalls. And since I need redundant switches too the firewall must support the spanning tree protocol.

My preferred setup:

        +------------+  +----------+  +--------------+
lan 1 --| firewall 1 |--| switch 1 |--| ha cluster 1 |
        +------------+  +----------+  +--------------+
                      \/     |
                      /\     |
        +------------+  +----------+  +--------------+
lan 2 --| firewall 2 |--| switch 2 |--| ha cluster 2 |
        +------------+  +----------+  +--------------+
link|improve this question
feedback

1 Answer

up vote 0 down vote accepted

Cisco ASAs and 65xx-series FWSM's can do this.

link|improve this answer
Anything higher than the Cisco 5510 (inclusive) – Tom O'Connor Nov 17 '10 at 14:12
Thanks for your answers. Any chance there is something that can be setup without becoming a CCNA first? – chris Nov 17 '10 at 14:30
Chris, depends on how much you know about firewalls and networks. I manage ASA series and I'm not CCNA – 3molo Nov 17 '10 at 14:43
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.