topic Re: Virtual-Wire connectivity during reboot in General Topics

Virtual-Wire connectivity during reboot

olev — Wed, 13 Jan 2010 14:39:33 GMT

Hi all,

I know some IDS/IPS are able to keep the network connectivity during a reboot. Then it does not stop the trafic.

Does the PA able to do the same in Virtual-Wire mode ? Or in other mode ?

The aim is to upgrade the appliance in a production environment.

Regards,

Olivier

Re: Virtual-Wire connectivity during reboot

mjacobsen — Wed, 13 Jan 2010 15:35:39 GMT

The system does not have the ability to go into a bypass mode. These modes circumvent all security policy and scanning and are not a good idea for firewalls. If a firewall had a mode like this, it would become the first target for an attacker as if he could get the device to reboot, he would have full access to the network.

To accomplish upgrades with no impact (and also for production environments where connectivity is critical), an HA deployment with two devices is recommended.

Mike

Re: Virtual-Wire connectivity during reboot

olev — Thu, 14 Jan 2010 13:20:03 GMT

Ok, I understand.

Thanks a lot.

Olivier