https://community.checkpoint.com/t5/Cloud-Firewall/Cluster-member-disfunction/m-p/210168#M4697 <P>Hi,</P> <P>make sure you have Google API access on the External VPC subnet (Cluster interfaces).</P> <P>during a failover the Primary Public IP (that's its name in Google IP addresses ) should move to the 2nd member.</P> <P>Also , you have 2 default static routes in the internal VPCs , priority 1 to Primary and Priority 2 to Backup. during a failover you need to see that the Priority 1 route is deleted , leaving only the default route to the Backup (new ACTIVE).</P> <P>I can guess you don't have the Google API access configured or you don't have access to them from the instances.</P> Mon, 01 Apr 2024 10:14:21 GMT Nir_Shamir 2024-04-01T10:14:21Z https://community.checkpoint.com/t5/Cloud-Firewall/Cluster-member-disfunction/m-p/210167#M4696 <P>Hello community<BR />Hello CheckPoint team<BR />Could you give an advise?<BR />We have Cluster located in Google Cloud. Cluster contains 2 FWs. And the problem is: when the second one is active it takes all the traffic and doesn't conduct it to the endpoints. When the first one is active and second switched off - all fine.</P> Mon, 01 Apr 2024 09:44:54 GMT https://community.checkpoint.com/t5/Cloud-Firewall/Cluster-member-disfunction/m-p/210167#M4696 m_k_user 2024-04-01T09:44:54Z https://community.checkpoint.com/t5/Cloud-Firewall/Cluster-member-disfunction/m-p/210168#M4697 <P>Hi,</P> <P>make sure you have Google API access on the External VPC subnet (Cluster interfaces).</P> <P>during a failover the Primary Public IP (that's its name in Google IP addresses ) should move to the 2nd member.</P> <P>Also , you have 2 default static routes in the internal VPCs , priority 1 to Primary and Priority 2 to Backup. during a failover you need to see that the Priority 1 route is deleted , leaving only the default route to the Backup (new ACTIVE).</P> <P>I can guess you don't have the Google API access configured or you don't have access to them from the instances.</P> Mon, 01 Apr 2024 10:14:21 GMT https://community.checkpoint.com/t5/Cloud-Firewall/Cluster-member-disfunction/m-p/210168#M4697 Nir_Shamir 2024-04-01T10:14:21Z