Interceptor

[StuartLivings]

The Deployment Guide (available on http://support.riverbed.com/ under the "Documentation" section) does cover the various design options.  Design decisions can rarely be summarised as a simple 'best practice' but you should find what you're looking for in there.

If not please do feel free to come back and let us know and we'll do our best to assist.

[tamisha]

Thanks.. Is this best practice documented anywhere?

[StuartLivings · Accepted solution]

For such design questions please do engage your Riverbed or channel Sales Engineer.  They can guide you through these types of design decisions.

In summary, though, you want to minimise the latency between the ICs and the SHs while maintaining the ICs as close to the WAN boundary as possible.  Firewalls or access control devices should go on the WAN side of the ICs and the SHs should go on the LAN side of the ICs.

[tamisha]

We are looking to deploy ICs in our current environment.  I was just wondering, how close do we have to place the SHs to the ICs?  Can we have the ICs closer to the WAN routers in the CORE and the SH in the server farm? Or does the ICs and the SH have to be in the CORE?