12-14-2009 07:02 AM
I want to know is if possible to balance two server farms (in diferent subnetworks of course) with tihe same CSS 11501. I have a firewall with 2 interfaces, in each interface I have one server farms to be balanced...Im not sure about the default gateway configuration in the CSS.
12-14-2009 07:22 AM
The CSS is also a router.
If you interconnect the 2 subnets to the css, you will bypass the firewall (or there is a risk of a hacker bypassing your firewall).
Therefore, you should have your CSS attached to only 1 subnet and use client nat when needed to guarantee that the response from the server goes back to the CSS.
Gilles.
12-14-2009 07:30 AM
Thanks
Im not clear about your answer. Do you say that is not possible to balance two server farm with the same CSS?
12-14-2009 09:19 AM
this is possible but this is not a secure design as the CSS will be able to bypass your firewall.
Gilles.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide