[c-nsp] Cisco FWSM vs Juniper NetScreen 5400

[Phil Mayers]

> > needs to be stable and have multi-chassis failover support.
> 
> This works, though NSRP can be a bit complex. You need to put interfaces
> into VSDs (virtual security devices) and a VSD can only be active on one
> device. Both the input and output interfaces For many topologies this
> means running the firewalls in active-standby mode.

Bah, sorry. That should read:

Both the input and output interfaces need to be in a VSD, and it must be
the same VSD. For many topologies etc. etc.