Dual vs. single firewall

[kellyrudnick]

Dual firewalls, is the overhead and extra resources really worth it?

How common is it?

[Kureli Sankar]

You mean a redundant/failover firewall? I believe you need to ask yourself the following questions.

1. How big is your organization?

2. How many people access the internet and other resources through this firewall?

3. If the firewall were to fail due to some hardware issues (for more than 4 hours), how does it affect your organization?

4. How many employees telecommute connecting to your org. via this firewall?

5. Do you have any 7X24 application that needs to be available?

[kellyrudnick]

No, I meant having a DMZ that is situated between two distinct firewalls.

Here is a link:

http://fengnet.com/book/FirewallFundamentals/ch09lev1sec3.html

I ask because the operations manager in my department brought it up, and I have never worked with this particular topology. So I am interested in seeing what you guys thing about utilizing a two firewall approach.

Does anyone use it?

Is it work the resources?