All references

Security

Firewall cluster with high availability

Firewall and network hardware in the rack

Starting point

The link between head office and branches depended on a single firewall and a single internet line. Any fault would have hit every site.

What we built

A redundant firewall cluster of two devices with automatic takeover on failure, plus line redundancy through a second internet connection. Failover scenarios were tested together with the customer: loss of one device, hardware fault, complete loss of one line, interruption of the network link.

Result

In testing the second instance took over each time and the link between head office and branches stayed stable. The dependency on a single firewall or line is gone.