topic Interface mismatch and failover in Firewall and Security Management

Interface mismatch and failover

kaus2005007 — Tue, 13 Jul 2021 08:15:30 GMT

Hello,

i have 2 pair of checkpoint of in HA mode. I have 1 question, if i add one virtual interface on standby box n push policy will it failover and become active box ?

Re: Interface mismatch and failover

Ruan_Kotze — Tue, 13 Jul 2021 11:34:29 GMT

Do you want it to fail over, because there are better ways of accomplishing this?

In terms of adding an interface without failover this would be the high-level way of doing it:

Stop the clustering on Standby member
Perform all operations on Standby member
Perform all operations on Active member
Perform all operations in SmartConsole
Start the clustering on Standby member

Detailed guidance can be found in sk57100.

Re: Interface mismatch and failover

kaus2005007 — Thu, 15 Jul 2021 13:45:15 GMT

Hello Ruan,

I just want to know will there be automatic failover as there will be config mismatch between. will standby firewall become active (as most recent updated config on standby fw).