ACE FWLB design

Unanswered Question
Sep 13th, 2009
User Badges:

Hi everyone,

We are trying to plan a topology for FWLB with ACE. We have a FWSM with one outside, and multiple DMZ/inside interfaces. This FWSM has to be duplicated because of performance.

We thought of using ACE in multiple context mode to perform FWLB. As FWSM has one outside, and multiple DMZ interfaces, we thought of using one context of ACE in front of FWSMs (in front of outside interface), and one context of ACE behind each of DMZ interfaces (one ACE context per DMZ interface).

Is this topology valid for FWLB? Documentation only describes the case of one outside and one inside interface…

Additionally, for some services residing in DMZs we need standard server load balancing (in addition to FWLB). Can we implement SLB on the same ACE contexts where FWLB is implemented?

Please point me to some documentation links, if there are any besides "ACE configuration guide".

Best regards,


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
jasmina27s Mon, 09/14/2009 - 21:47
User Badges:


Sorry, but these documents do not mention Firewal load-balancing functionality at all.




This Discussion