ProSecure Unified Threat Management UTM10 or UTM25 Reference Manual
B-8 Network Planning for Dual WAN Ports (UTM25 Only)
v1.0, September 2009
In the single WAN case, the WAN’s Internet address is either fixed IP or a FQDN if the IP address
is dynamic.
Inbound Traffic to a Dual WAN Port System
The IP address range of the UTM’s WAN port must be both fixed and public so that the public can
send incoming traffic to the multiple exposed hosts when this feature is supported and enabled.
Inbound Traffic: Dual WAN Ports for Improved Reliability
In a dual-WAN port auto-rollover configuration, the WAN port’s IP address will always change
when a rollover occurs. You must use a FQDN that toggles between the IP addresses of the WAN
ports (that is, WAN1 or WAN2).
Inbound Traffic: Dual WAN Ports for Load Balancing
In a dual-WAN port load balancing configuration, the Internet address of each WAN port is either
fixed if the IP address is fixed or a FQDN if the IP address is dynamic (see Figure B-6 on page
B-9).
Figure B-4
Figure B-5
Note: Load balancing is implemented for outgoing traffic and not for incoming traffic.
Consider making one of the WAN port Internet addresses public and keeping the
other one private in order to maintain better control of WAN port traffic.