High-Availability

Active-Backup Scenario

Firewalls share state via a dedicated connection.

Firewalls share LAN (Virtual) IP addresses.

The backup firewall assumes IP and Services upon failure of the Active firewall.

Active-Active Scenario

Firewalls share state via a dedicated connection.

Firewalls have their own IP addresses.

Both work simultaneously.

• Share load.

• Solve asymmetric routing problem.

• Work with load-balancers.