Help the Newbies

[Edwin Groothuis]

As cgeary said, the optimization service itself doesn't differentiate between the traffic on the various in-path interfaces. It doesn't have support for different in-path and peering rules per in-path interface neither, making it impossible to properly assume that "rogue" traffic from one network on the other network does not get touched by the Steelhead appliance. Etc.

I don't know about the FIPS-140-2 certification, will check it later.

Edwin

[Nick]

Thanks Chris,   I guess I only have one question left to make my decision on weather I do this or not.  Is the 1050M FIPS 140-2 certified?

[cgeary]

If you need to guarantee physical separation, I would recommend you deploy two physical Steelheads. RiOS has the capability to route packets internally although, in theory, this should never happen in your deployment if subnets are different.

[Nick]

Found it is physically possible in the Deployment Guide but the question of cross network visibility is still open.

[Nick]

This is a brand new network and my first time using IP Accelerators.  I’ve got two physically separate networks, one classified and one for commercial internet access.  I’ve got a Steelhead 1050M with 2 In-Path LAN and 2 In-Path WAN interfaces at each end of a satellite link.  Can I run one network through In-Path LAN/WAN 0 and one through IN-Path LAN/WAN 1?  Is there a danger on cross network contamination?