NetScreen, RedCreek aim for more reliable VPNs

By Tim Greene
Network World, 09/10/01

NetScreen and RedCreek Communications this week will make separate announcements that address the problem of backing up firewall/VPN sessions in data centers and at small enterprise offices.

NetScreen is announcing software at NetWorld+Interop 2001 in Atlanta to make secure access to data centers more reliable, even when switches surrounding NetScreen's high-speed firewall/VPN devices fail.

The company's Screen OS 2.7 software release adds the ability for NetScreen boxes to share the load of protecting data-center Internet connections when both boxes are up and running.

Protecting against data center failures

Like earlier releases, Version 2.7 also lets NetScreen boxes back each other up if one fails, but can do so in two new ways.

In both scenarios, the NetScreen devices would sit on the data center side of dual switch/routers that have separate connections to the Internet. When all devices were functioning, each switch/router would feed Internet traffic to one of the NetScreen boxes.

With the first new back-up option, if a switch/router feeding Internet traffic to the NetScreen devices failed, both NetScreen devices could continue to function. With the second option, if one of the switch/routers as well as a switch between the NetScreen device and the data center failed, both NetScreen devices would stay active and sessions would not be lost. If the back-up switch/routers and switches were fast enough, throughput to the data center would not dip either (see graphic).

"It provides the capability to lose more than one device and still be able to continue to function without losing connectivity," says Martha Young, an analyst with Enterprise Management Associates. She says NetScreen is the only vendor she knows of with this capability.

The software upgrade runs on NetScreen 1000 and 500.

Separately, a new two-port Gigabit Ethernet module will be available for NetScreen 500 by the end of the month.

Travlin Ravlin

Meanwhile, RedCreek is introducing a firewall/VPN box called Travlin Ravlin, designed for home offices, stores and unattended bank kiosks. The device can link a PC to a DSL or cable-modem line, and if the broadband line fails, automatically dial up a new VPN connection using an integrated analog modem.

When the broadband line comes back up, Travlin Ravlin drops the analog connection and re-establishes the higher-bandwidth circuit.

The device could be used to support telecommuters who require a link to corporate network resources to do their jobs. If they have only a DSL or cable modem connection and it goes down, they would be stranded.

RedCreek says the device is well suited to unattended bank kiosks that connect to central databases to collect customer account information. The dial-up failover can keep these kiosks working until downed circuits are restored or a technician can be dispatched.

Similarly, retail stores' broadband connections used for inventory or credit card look-ups will be backed up. Typically these stores lack on-site technical staff.

Travlin Ravlin costs $700 and is available Oct. 15.