https://community.checkpoint.com/t5/Firewall-and-Security-Management/Firewall-Failover-question/m-p/124953#M18041 <P>Agree with phoneboy here...diagram would definitely help us in this situation.</P> Mon, 26 Jul 2021 22:25:44 GMT the_rock 2021-07-26T22:25:44Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Firewall-Failover-question/m-p/124925#M18037 <P>We have 2 firewalls in 2 data centers; DC1 FW-a DC2 Fw-b; both firewalls need to connect 10+ remote sites to poll data. In this example we use only 3 remote sites RM-A, RM-B, RM-C.&nbsp; And if Fw-a go down Fw-b should take over. Both data center’s Fw-a and Fw-b has IP connectivity. How we can configure firewalls to connect remote sites and do fail over if active firewall go down? Is it possible if remote sites only support static routes not dynamic routing.</P> Mon, 26 Jul 2021 14:47:20 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Firewall-Failover-question/m-p/124925#M18037 CPRQ 2021-07-26T14:47:20Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Firewall-Failover-question/m-p/124947#M18040 <P>I assume DC1 and DC2 are in different physical locations.<BR />Is there any shared Layer 2 connectivity or not?<BR />An actual network diagram showing the proposed gateways and traffic flows would help.</P> Mon, 26 Jul 2021 21:39:05 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Firewall-Failover-question/m-p/124947#M18040 PhoneBoy 2021-07-26T21:39:05Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Firewall-Failover-question/m-p/124953#M18041 <P>Agree with phoneboy here...diagram would definitely help us in this situation.</P> Mon, 26 Jul 2021 22:25:44 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Firewall-Failover-question/m-p/124953#M18041 the_rock 2021-07-26T22:25:44Z