Distributed Firewalls

• 2 or more firewalls

  • share the load
  • redundancy in event of hardware or routing failure

• Need to keep rules synchronized

• Need to keep state synchronized

  • Packets for a given stream may go through either firewall