Home / server / Questions / 281900
Accepted
Variant
Asked: 2011-06-20 00:59:59 +0800 CST

Using a UTM with a Link Aggregrator

  • 772

I consider changing my office's internet access infrastructure to multilpe ADSL lines aggregated with a link aggregator (Peplink B710).

I plan to place my existing UTM (FortiGate-100A) after the balancer.

Should I expect any problems with this configuration? I am afraid that the multi link , multi IP network might make the UTM block some traffic with some attack threat false positives.

Does anyone have any experience with this setup?

bonding utm intrusion-detection

1 Answers

  1. Best Answer

    If the network traffic sessions are not stateful end-to-end across the multi-link device, through the UTM, all the way to the end-clients, then some applications may not work. In those cases, the end-point applications may wind up seeing something that looks like a session hijack attack, if multiple IPs (as the result of the multi-link device) are swapped around during any attempted user session.

    • 1