01-13-2010 06:39 AM
Hi all,
I know some IDS/IPS are able to keep the network connectivity during a reboot. Then it does not stop the trafic.
Does the PA able to do the same in Virtual-Wire mode ? Or in other mode ?
The aim is to upgrade the appliance in a production environment.
Regards,
Olivier
01-13-2010 07:35 AM
The system does not have the ability to go into a bypass mode. These modes circumvent all security policy and scanning and are not a good idea for firewalls. If a firewall had a mode like this, it would become the first target for an attacker as if he could get the device to reboot, he would have full access to the network.
To accomplish upgrades with no impact (and also for production environments where connectivity is critical), an HA deployment with two devices is recommended.
Mike
01-14-2010 05:20 AM
Ok, I understand.
Thanks a lot.
Olivier
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
