Re: Loadbalancer without using a Firewall...

The first layer of defense is the IPS...and also I assume that some kind of syn/dos/ddos defense mecanism is ON on the loadbalancer, on a standart IOS we do only protect the router itself and PERMIT the rest...

________________________________
From: [email protected] [mailto:[email protected]] On Behalf Of Chris Miller
Sent: Friday, December 18, 2009 4:26 PM
To: 'Load Balancing Mailing List'
Subject: Re: [load balancing] Loadbalancer without using a Firewall...

When you say "without using a network firewall" in front, are you also not using any ACLs on your routers? I know of several businesses that have Cisco routers running IOS firewalls and then an F5 LTM with ASM running. That's typically sufficient.

I certainly don't believe the Load Balancer should be your first layer of defense..

Chris Miller


________________________________
From: [email protected] [mailto:[email protected]] On Behalf Of Cihan Subasi (Garanti Teknoloji)
Sent: Friday, December 18, 2009 8:14 AM
To: [email protected]
Subject: [load balancing] Loadbalancer without using a Firewall...

Hi all,

I would like to know whether using only "a loadbalancer and an IPS" is compliant with audit standards as far as an financial ebank site is concerned. I have heard some portal sites use a loadbalancer without using a network firewall in front. And this setup is recommended with an IPS because a firewall is much more vulnerable to a DOS/DDOS and SYN attacks. I would appreciate your opinions about compliancy of this setup and pros/cons. Thanks

This message and attachments are confidential and intended solely for the individual(s) stated in this
message. If you received this message although you are not the addressee, you are responsible to keep the
message confidential. The sender has no responsibility for the accuracy or correctness of the
information in the message and its attachments. Our company shall have no liability for any changes
or late receiving, loss of integrity and confidentiality, viruses and any damages caused in
anyway to your computer system.

Bu mesaj ve ekleri, mesajda gonderildigi belirtilen kisi/kisilere ozeldir ve gizlidir. Bu mesajin muhatabi
olmamaniza ragmen tarafiniza ulasmis olmasi halinde mesaj iceriginin gizliligi ve bu gizlilik yukumlulugune
uyulmasi zorunlulugu tarafiniz icin de soz konusudur. Mesaj ve eklerinde yer alan bilgilerin dogrulugu ve
guncelligi konusunda gonderenin ya da sirketimizin herhangi bir sorumlulugu bulunmamaktadir. Sirketimiz
mesajin ve bilgilerinin size degisiklige ugrayarak veya gec ulasmasindan, butunlugunun ve gizliliginin
korunamamasindan, virus icermesinden ve bilgisayar sisteminize verebilecegi herhangi bir zarardan
sorumlu tutulamaz.

_______________________________________________
lb-l mailing list
[email protected]
http://vegan.net/mailman/listinfo/lb-l
Searchable Archive: http://vegan.net/lb/archive
http://lbdigest.com Load Balancing Digest
http://lbwiki.com Load Balancing Wiki