Cisco 11000 Series of Content Services Switch (CSS) and Check Point

mfranzoso · ‎05-16-2001

Hi,

I need to know if:

Cisco 11000 Series of Content Services Switch (CSS)

can be used to do load balancing of Firewall Check Point.

I need to Know the new cisco name of "Arrow point Model CS50".

Thank you.

Monica

gajohnst · ‎05-16-2001

Monica,

Yes, the Cisco CSS 11000 Series can load balance Check Point Firewalls. There are specific design requirements that are layed out in the documentation.

The Arrowpoint Model CS50 is now:

CSS-11051-AC (8 10/100BASE-TX ports)

CSS-11052-AC (8 10/100BASE-TX ports & 1 1000BASE-SX

bhose · ‎05-21-2001

Hi Monica,

Yes, as Gary has indicated the CSS will work with Checkpoint in a firewall load balancing environment. I have just finished a project in which we were using 2 Nokia IP650's and 4 CSS-150's. I used a configuration fairly similar to the one found in:-

http://www.cisco.com/warp/customer/117/fw_load_balancing.html.

There were a few small gotya's but the whole thing worked quite well.

Regards Brett

dhollarnii · ‎03-13-2002

Hi Gary,

We are looking at using 11151 CSS and IP740's.. Can you send me your email if you dont mind..

thanks

0dseelig · ‎07-02-2001

The CSS is Checkpoint OPSEC certified, and I also believe there is a possibility of creating a Firewall sandwich, one CSS is requried either side.

perherna · ‎03-13-2002

You might also want to check this out:

http://www.cisco.com/univercd/cc/td/doc/product/webscale/css/css_500/advcfggd/firewall.htm

Your FWLB config will vary depending on which method of redundancy you configure with yout CSSes.

Cheers,

Perry.