Distributed Firewalls

• 2 or more firewalls

  • share the load
  • redundancy in event of hardware or routing failure

• Need to keep rules synchronized

• Need to keep state synchronized