Basic hardware setup question

[admin_2]

Hell-o all,

Just setup and testing two pix515e firewalls. We want to use these boxes in a failover configuration. I understand the failover cable connection between the boxes. We also recieve two additional single port nics. Are these for a dmz setup or do they just connect both boxes together for a stateful failover?

Signed,

Confused in Northern Cal

[gfullage]

You need the third interface if you're going to do stateful failover, this interface will be used to transfer state information between the two PIXes. Put these NIC's in each PIX and configure it up, call the interface "failover" or something like that.

See http://www.cisco.com/warp/public/110/failover.html for some good information on setting them up initially.

[#3]

Excellent, thank you!