8-1. Firewall Load Balancing Overview

You can implement firewalls to provide security in several ways. Table 8-1 is a quick comparison between a single firewall, a firewall failover pair, and a firewall farm that uses Firewall Load Balancing (FWLB).

Table 8-1. Comparison of Firewall Availability
AttributeSingle FirewallFirewall FailoverFWLB
CostLower. Only one firewall unit is needed.Medium. Two units are needed.Higher. At least two firewall units are needed, along with load-balancing devices.
Firewall Points of FailureOne: the firewall itself.None. The firewall pair can be physically separated.None. All firewalls are grouped to make up a firewall farm.
PerformanceLimited to a single firewall.Limited to a single firewall. Only one of the pair actively ...

Get Cisco ASA and PIX Firewall Handbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.