 Flexible distribution of all services (protocol/port) onto different internet connections
With gateProtect load balancing you have any number of possibilities available for distributing data traffic.
Routes for individual services (protocols/port) as well as desktop objects (IP addresses, users and user groups, VPN connections) can be placed as required on one or several internet connections.
With gateProtect load balancing one can, for example, divert all email traffic on the internal mail server via internet connection 1 and allocate internet connection 2 for internet surfing. This also works for a DMZ so that, for example, the internal mail server can be accessed via the DMZ but only via a router connection
Technology
For load balancing in the firewall the data packets for the desired service are selected according to their source (IP address, user, VPN connection...), protocol (TCP, UDP, ICMP ...) and other criteria as required (such as TCP port) and are provided with a clear marking for identification.
The decision regarding which internet connection(s) the data stream should use is made in the routing process on the basis of the previously assigned marking (so-called “policy routing”).
|
