10-27-2003 01:00 PM - edited 02-20-2020 11:03 PM
I have heard from a colleague of mine that there may be some issues with a failover setup and using a DMZ. Can anyone give me a configuration example or other wise direct me?
Thanks,
Philip-
10-27-2003 03:38 PM
Hi,
We have not heard of any such thing. If you are using statefull failover, then use a separate interface other then DMZ for failover updates.
Here is the link for failover.
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v52/config/advanced.htm#10796
Config for DMZ are similiar to configuring inside/outside
Thanks
Nadeem
11-01-2003 06:37 PM
Also, make sure both firewalls in the failover pair have a DMZ interface. Then make sure both DMZ interfaces can connect on the same LAN. The firewalls must poll and answer each other on EVERY interface that is in use, or failover can be triggered.
DaveH
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide