Welcome to ISAserver.org

failover scenerio

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> General >> failover scenerio

Page: [1]

Message

<< Older Topic Newer Topic >>

failover scenerio - 13.Mar.2008 5:03:34 PM

avrd19

Posts: 8
Joined: 27.Feb.2008
Status: offline

Having 2 isa servers using dns wpad. How would I get preference to one over the other when the firewall client does a refresh.

Basiclly if it were possible to preference on server through dns (wpad). Would it be possible to have a script that would ping each wpad server in dns. if one fails remove it from dns and set the firewall clients to refresh their configuration (or just have it refresh on a 3min interval)?

jason

Post #: 1

Featured Links*

RE: failover scenerio - 14.Mar.2008 1:41:29 PM

Jason Jones

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline

The recommended fault tolerance approach for firewall clients is to use DNS round robin.

You can set the refresh interval by using A record TTLs.

< Message edited by Jason Jones -- 14.Mar.2008 1:43:21 PM >

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to avrd19)

Post #: 2

RE: failover scenerio - 14.Mar.2008 4:46:07 PM

avrd19

Posts: 8
Joined: 27.Feb.2008
Status: offline

Wouldnt this have to be inconjuction with the 'firewall clients' wspad.dat ttl. That is
if the ttl on the wspad was expired and it did a lookup wpad.domin.org if the dns record's ttl was within the time of the lookup was done it would use it from its cache, and if the lookup was done after the records ttl it then would query for dns.

jason.

(in reply to Jason Jones)

Post #: 3