https://community.checkpoint.com/t5/Firewall-and-Security-Management/Problem-with-logical-Servers/m-p/115507#M16245 <P>In your experience have you had any problems similar to my client's with logical servers or could you suggest any recommendations for this problem?</P><P>I thought about connections persist to reset the connections and send them exclusively to the logical server member when installing policies but that would affect more connections already established.</P> Wed, 07 Apr 2021 14:24:03 GMT Carlos_Arzate 2021-04-07T14:24:03Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Problem-with-logical-Servers/m-p/115444#M16231 <P>The customer has been configured some logical servers. One of them has 2 servers. They had some internal problems and they made a decision to take it down while the problem was reestablished.</P><P>The issue is that the requests were still being displayed to the server that was removed from the group. When it should not have to because it was not within the logical server.</P><P>Previously in version R80.10, they did only need to install policies and the problem was solved. Now they need to remove the host of the logical server but this affectation was presented.</P><P>The client as a workaround disabled "Use persistent server mode".</P><P>The client wants to know if with the new version R80.40 the logical servers work in a different way or if the way they work now is an own characteristic to maintain the persistent connections to the server.</P><P>Can you help us to check what is happening with the logical servers?</P><P>Do you have any comments about this issue?</P> Wed, 07 Apr 2021 01:16:04 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Problem-with-logical-Servers/m-p/115444#M16231 Carlos_Arzate 2021-04-07T01:16:04Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Problem-with-logical-Servers/m-p/115448#M16232 <P>The functionality behind Logical Server objects haven't changed in quite some time.<BR />The only major change we've made to it in the last several years was to support use cases in public cloud.<BR />We haven't done any specific enhancements for on-premise usage.</P> Wed, 07 Apr 2021 02:27:33 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Problem-with-logical-Servers/m-p/115448#M16232 PhoneBoy 2021-04-07T02:27:33Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Problem-with-logical-Servers/m-p/115507#M16245 <P>In your experience have you had any problems similar to my client's with logical servers or could you suggest any recommendations for this problem?</P><P>I thought about connections persist to reset the connections and send them exclusively to the logical server member when installing policies but that would affect more connections already established.</P> Wed, 07 Apr 2021 14:24:03 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Problem-with-logical-Servers/m-p/115507#M16245 Carlos_Arzate 2021-04-07T14:24:03Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Problem-with-logical-Servers/m-p/115531#M16255 <P>I'm not aware of a lot of customers using this feature outside of CloudGuard Network Security.<BR />However, this does seem like it's not working as expected.<BR />If you removed a server from the pool, installed policy, and traffic is still being directed to that server, that implies something may be cached in one of the connection tables.<BR />This might need a TAC case.</P> Wed, 07 Apr 2021 21:24:18 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Problem-with-logical-Servers/m-p/115531#M16255 PhoneBoy 2021-04-07T21:24:18Z