Firebox SSL VPN Gateway Administration Guide - WatchGuard ...

Firebox SSL OverviewDeployment OptionsThe Firebox SSL Quick Start describes how to install the FireboxSSL with a firewall, the most common configuration. You canalso connect the Firebox SSL to other devices such as a serverload balancer or router.Connecting to a Server Load BalancerYou can connect one or more Firebox SSLs to a server load balancer.Characteristics of this configuration include the following:• Incoming web traffic is intercepted by the server loadbalancer and load balanced between the Firebox SSLs (ifmore than one Firebox SSL is in use).• For optimal performance, the server load balancer isconfigured with a virtual IP (VIP). The VIP is used by theFirebox SSL when reestablishing connection to the serverload balancer.• The Firebox SSL External Public Address is the externalfacing(public) VIP address of the server load balancer. TheFirebox SSL modifies all requests to include the ExternalPublic Address. The External Public Address ensures that theredirected client returns to the Firebox SSL it firstencountered, providing session stickiness. The associationbetween a particular request and the Firebox SSL is brokenonly when the client makes a new connection.To establish the physical connection, connect the Firebox SSLeth0 interface to the internal network. Use the Firebox SSLAdministration Tool to configure network settings. Specify theIP address of the server load balancer as the Default Gatewaysetting on the Networking > General Networking tab.16 Firebox SSL VPN Gateway Administration Guide