Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 117 / 861

117 Establishing your network
Deployment scenarios
Fault tolerant deployment
You can extend the basic deployment by adding one or more security gateways. This type of
configuration, shown in
Figure 5-2 , can provide redundant and load-balanced processing power in the
event of a catastrophic failure of a security gateway. Again, connection requests are usually initiated
from the protected network, destined for external services. A clustered configuration usually requires
a third heartbeat network, which is used to monitor the status of each member of the cluster, and to
pass cluster configuration information.
Figure 5-2 Fault tolerant network scenario
Router
Security gateway
Security gateway
SGMI
Hub
192.168.0.5 192.168.0.6 192.168.0.7 192.168.0.5
192.168.0.5
192.168.0.2 192.168.0.1
172.28.0.1
172.28.0.2
172.16.0.3
172.16.0.2
172.16.0.1
10.1.1.1