Re: Inline serial clustering - Stonegate IPS

["aditya mukadam" <aditya.mukadam () gmail com>]

Can you please elaborate on 'increase performance and resilience'
and/or what exactly do we want to achieve with clustering ?

It can be either,
1) Active-Active (a-a)
2 ) Active-Passive (a-p)

In any of the above case, we would need to consider if :
a. Does Stonegate has build in functionality?
b. If no built in HA, you would need to be dependent on the connected
L3 devices to do the trick.

Bottom line is you would also need to consider the compatibility of
the connecting devices for a-a or a-p functionality . I know instances
when there are compatibility and other weird issues like, if interface
of switch flaps, IPS will not allow the traffic etc.

Hope this helps.

Thanks,
Aditya Govind Mukadam

On Tue, Jan 6, 2009 at 10:10 PM, styler <styler1974 () gmail com> wrote:
> Hi list,
>
> We're currently running a StoneGate IPS appliance in inline mode and are
> considering adding a second appliance to enable serial clustering for
> increased performance and resilience.  Does anyone have any experience of
> this and is it worth doing?  Also, any alternative tips for resilience would
> be appreciated.
>
> Thanks
> --
> View this message in context: http://www.nabble.com/Inline-serial-clustering---Stonegate-IPS-tp21313978p21313978.html
> Sent from the IDS (Intrusion Detection System) mailing list archive at Nabble.com.
>
>
> ------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it
> with real-world attacks from CORE IMPACT.
> Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
> to learn more.
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------