Cisco 11000 Series of Content Services Switch (CSS) and Check Point

[mfranzoso]

Hi,

I need to know if:

Cisco 11000 Series of Content Services Switch (CSS)

can be used to do load balancing of Firewall Check Point.

I need to Know the new cisco name of "Arrow point Model CS50".

Thank you.

Monica

[gajohnst]

Monica,

Yes, the Cisco CSS 11000 Series can load balance Check Point Firewalls. There are specific design requirements that are layed out in the documentation.

The Arrowpoint Model CS50 is now:

CSS-11051-AC (8 10/100BASE-TX ports)

CSS-11052-AC (8 10/100BASE-TX ports & 1 1000BASE-SX

[bhose]

Hi Monica,

Yes, as Gary has indicated the CSS will work with Checkpoint in a firewall load balancing environment. I have just finished a project in which we were using 2 Nokia IP650's and 4 CSS-150's. I used a configuration fairly similar to the one found in:-

http://www.cisco.com/warp/customer/117/fw_load_balancing.html.

There were a few small gotya's but the whole thing worked quite well.

Regards Brett

[dhollarnii]

Hi Gary,

We are looking at using 11151 CSS and IP740's.. Can you send me your email if you dont mind..

thanks

[0dseelig]

The CSS is Checkpoint OPSEC certified, and I also believe there is a possibility of creating a Firewall sandwich, one CSS is requried either side.

[perherna]

You might also want to check this out:

http://www.cisco.com/univercd/cc/td/doc/product/webscale/css/css_500/advcfggd/firewall.htm

Your FWLB config will vary depending on which method of redundancy you configure with yout CSSes.

Cheers,

Perry.