Solved

Experience with Active/Active Clustering on Sonicwall NSA Firewalls

Posted on 2014-07-25
3
1,094 Views
Last Modified: 2014-07-28
Does anyone have any experience with running a pair of SonicWall's in an Active/Active Configuration?

We are thinking of adding another unit to make a pair to add extra performance with our new internet connection while adding some redundancy.

Does it work well?
How is the failover/failback?
Do you get close to the combined throughput of both units?
Any gotchas?
0
Comment
Question by:PerimeterIT
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 39

Expert Comment

by:Aaron Tomosky
ID: 40221584
Can you please describe your current setup including model numbers and bandwidth information? Also which security packages on the sonicwall you use and any other firewall/Ids/gav/etc devices.
0
 
LVL 1

Author Comment

by:PerimeterIT
ID: 40222050
We have a pair of NSA 3500's with the HA license.
Its for a 1gb/s sync internet connection, expecting 2500 simultaneous connections.

This is a temporary project, and throughput is essential. We have disabled IPS and all scanning functionality. Security wise we are happy with a basic firewall/NAT.
0
 
LVL 39

Accepted Solution

by:
Aaron Tomosky earned 500 total points
ID: 40222108
I assume you have see this:
http://www.sonicwall.com/downloads/SonicOS_5.6.5_Active-Active_Clustering.pdf

My personal experience doesn't get into active active clusters but I will say that sonicwall performance is 1/2 of stated in all cases I've experienced e.g. if it can handle 500mbps up and 500mbps down they state that as 1gbps.
The isd throughput is also 1/2 again (so 1/4 of stated)  in default high/medium/low threat detection. To get back up to 1/2 of stated you have to switch to "performance mode" which doesn't look for low value threats.

Anyway the point of all this is You may not get 1gbps up and down even with two 3500s in a cluster.
0

Featured Post

Webinar: Aligning, Automating, Winning

Join Dan Russo, Senior Manager of Operations Intelligence, for an in-depth discussion on how Dealertrack, leading provider of integrated digital solutions for the automotive industry, transformed their DevOps processes to increase collaboration and move with greater velocity.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question