Pix 515 with two links to internet

[agonzalez]

Hi you guys!

I need to put to work a firewall 515E on internet but I have two links with two diferent carriers, but I don´t know if it is possible.

I need this links one for a farm server that need to go through and the another link for users and this links can be a backup of each other in case one of this go down!

any idea? could it works?

I think use a trusted network fo user, a zone for the first internet link and a zone for second internet link!

[jlefko]

First off, what public address scheme are you going to use, from which ISP. I would highly recommend against this as it will just cause way to many problems. You are better off installing a router infront to connect to the ISPs and then put a pix behind it.

[desguerra]

Since you have two ISP's, you can also have a router for each ISP and connect both routers to a switch. Connect your 515E to the same switch and run HSRP between the two routers. Point your PIX default route to the HSRP IP address. And then you can load-share between the two routers. You will need to run BGP on both routers.

dzm3wr@msn.com

[jimwelsh]

Or, if there one or both ISPs won't cooperate with you to run BGP, then get one router with three Ethernet/FastEthernet interfaces and use Policy-Based Routing to direct some traffic (say web browsing) to one ISP and other traffic (say e-mail or inbound hosted services) to the other ISP.

Certainly less desirable than desquerra's BGP solution, but still works in a pinch ;0).