Article
Test Result
Summary
Test Description: Compatibility testing between Interface Master Niagara Bypass and FortiGate unit
This report shows the compatibility testing between Interface Master Niagara Bypass and FortiGate unit.
The DUT is the FortiGate-3600C and Interface Master Niagara 2818.
The following test scenarios have been tested with the result captured by screenshot:
- Fail open test based on the FortiGate failure.
- Fail open test based on the link failure.
- Fail open test based on the FortiGate software failure.
Below is the test architecture that has been set up to test the above scenarios. In this test case, FG3600C unit that is running in layer 2 mode with IPS turned on connects to Interface Master Niagara External Bypass, and the bypass will then connect to 2 different switches, and each of them has a laptop connected to it. A continuous PING will be executed from 172.16.1.100 to 172.16.1.99 to test the fail open.
Test Result
The following tests have been simulated in the Lab to test the external bypass fail open capability:
1) Fail open test based on FortiGate failure.
In this test, we have simulated FortiGate’s failure by unplugging the power cable of FortiGate.
2) Fail open test based on link failure.
In this test, we have simulated FortiGate’s link failure by unplugging the 10GE link.
3) Fail open test based on FortiGate software failure.
In this test, we have simulated FortiGate’s software failure by shutting down firewall by using a command.
Based on the simulation tests carried out above, Interface Master external bypass has successfully failed opened without any issue. As shown below, all 3 test scenarios produced the same result and there was no downtime when the Interface Master external bypass failed open or vice versa from the PING result (see command prompt below).
Summary
In summary, FortiGate firewall can interoperate with Interface Master Niagara External Bypass to provide fail open capabilities. The firewall will fail open when the following scenarios happen:
1) FortiGate firewall hardware failure.
2) FortiGate firewall link failure.
3) FortiGate firewall software failure.
