flynn23 wrote:
] I think you overspend
] on trying to concoct a really complex topology to get this to
] work. Essentially whatever you might be saving by buying 2
] bigger FWs gets eaten up in other hardware and administrative
] time.

Let me second that. My experience with full cluster firewalls is that the amount of complexity often makes them prohibitively expensive to build and operate. Its a fun technical challenge for a firewall geek, but in production active/passive is always a more reliable solution unless you MUST have 3+ devices in order to handle the bandwidth you are seeing (which is rare right now as Moore's law is scaling faster then most people's bandwidth requirements; there are some very fast appliances out there).

RE: Help, I'm Stuck On Stupid