topic Re: Lightboard Series: High Availability Architecture with R80.10 in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Lightboard-Series-High-Availability-Architecture-with-R80-10/m-p/44444#M21766 <HTML><HEAD></HEAD><BODY><P>Nicely done, and timely, too!</P><P>Someone was just asking about Management HA in a local CheckMates Live event I was running.</P></BODY></HTML> Wed, 25 Jul 2018 02:40:43 GMT PhoneBoy 2018-07-25T02:40:43Z Lightboard Series: High Availability Architecture with R80.10 https://community.checkpoint.com/t5/Firewall-and-Security-Management/Lightboard-Series-High-Availability-Architecture-with-R80-10/m-p/44442#M21764 <P><IFRAME src="https://cdn.embedly.com/widgets/media.html?src=https%3A%2F%2Fwww.youtube.com%2Fembed%2FHFxcGew2OOA%3Ffeature%3Doembed&amp;url=http%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DHFxcGew2OOA&amp;image=https%3A%2F%2Fi.ytimg.com%2Fvi%2FHFxcGew2OOA%2Fhqdefault.jpg&amp;key=dbd8e071ec924c24aed29db4738a7e1c&amp;type=text%2Fhtml&amp;schema=youtube" width="854" height="480" frameborder="0" scrolling="no" allowfullscreen="allowfullscreen" class="embedly-embed" allow="autoplay; fullscreen"></IFRAME></P> <P><SPAN style="font-size: 11.0pt; color: #1f497d;">This video elaborates on Check Point’s High Availability architecture in security management servers, in what sense it defers from previous versions and its benefits.</SPAN></P> Sun, 14 Nov 2021 12:21:24 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Lightboard-Series-High-Availability-Architecture-with-R80-10/m-p/44442#M21764 Yair_Herling 2021-11-14T12:21:24Z Re: Lightboard Series: High Availability Architecture with R80.10 https://community.checkpoint.com/t5/Firewall-and-Security-Management/Lightboard-Series-High-Availability-Architecture-with-R80-10/m-p/44443#M21765 <HTML><HEAD></HEAD><BODY><P>Tasty learning byte - for me, the duration, topics, depth of explanations, visual aids are quite adequate.</P><P></P><P>[Aha moment] So the send_command which was able (up to R80) to switch roles and to trigger sync is no longer working because it does not interacts with CPM which is handling delta syncs. In R80.x there is no other way than SmartConsole to trigger a full sync or role switch</P><P></P><P>However, it seems that FWM is still involved - e. g. interrupting an initial Full Sync (which left the secondary server inaccessible via SmartConsole/mgmt._cli, with the full sync in progress, try later message and the primary server unable to retry the Full Sync) left no traces in cpm.elg with&nbsp;<SPAN style="display: inline !important; float: none; background-color: transparent; color: #000000; font-family: 'DIN'; font-size: 14px; font-style: italic; font-variant: normal; font-weight: bold; letter-spacing: normal; orphans: 2; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; -webkit-text-stroke-width: 0px; white-space: normal; word-spacing: 0px;">cpm_debug.sh -t HA -s DEBUG</SPAN> (R80.10 w JHF T112) and only clearing the status in $FWDIR/conf/mgha allowed the Full Sync to be restarted - the outdated sk80060,&nbsp;Debugging Management HA synchronization, might still be useful.</P></BODY></HTML> Wed, 25 Jul 2018 01:59:11 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Lightboard-Series-High-Availability-Architecture-with-R80-10/m-p/44443#M21765 APopisteru 2018-07-25T01:59:11Z Re: Lightboard Series: High Availability Architecture with R80.10 https://community.checkpoint.com/t5/Firewall-and-Security-Management/Lightboard-Series-High-Availability-Architecture-with-R80-10/m-p/44444#M21766 <HTML><HEAD></HEAD><BODY><P>Nicely done, and timely, too!</P><P>Someone was just asking about Management HA in a local CheckMates Live event I was running.</P></BODY></HTML> Wed, 25 Jul 2018 02:40:43 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Lightboard-Series-High-Availability-Architecture-with-R80-10/m-p/44444#M21766 PhoneBoy 2018-07-25T02:40:43Z Re: Lightboard Series: High Availability Architecture with R80.10 https://community.checkpoint.com/t5/Firewall-and-Security-Management/Lightboard-Series-High-Availability-Architecture-with-R80-10/m-p/44445#M21767 <HTML><HEAD></HEAD><BODY><P>Nice, but would like to see and hear more about MDS HA specifics.</P></BODY></HTML> Wed, 25 Jul 2018 12:12:40 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Lightboard-Series-High-Availability-Architecture-with-R80-10/m-p/44445#M21767 Vladimir 2018-07-25T12:12:40Z Re: Lightboard Series: High Availability Architecture with R80.10 https://community.checkpoint.com/t5/Firewall-and-Security-Management/Lightboard-Series-High-Availability-Architecture-with-R80-10/m-p/44446#M21768 <HTML><HEAD></HEAD><BODY><P>You asked, <A href="https://community.checkpoint.com/migrated-users/49350">Yair Herling</A>‌ delivers: <A href="https://community.checkpoint.com/videos/6565">Lightboard Series: R80.10 High Availability in Multi Domain Environments</A>‌</P></BODY></HTML> Fri, 27 Jul 2018 16:44:35 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Lightboard-Series-High-Availability-Architecture-with-R80-10/m-p/44446#M21768 PhoneBoy 2018-07-27T16:44:35Z Re: Lightboard Series: High Availability Architecture with R80.10 https://community.checkpoint.com/t5/Firewall-and-Security-Management/Lightboard-Series-High-Availability-Architecture-with-R80-10/m-p/44447#M21769 <HTML><HEAD></HEAD><BODY><P>Going to watch it right now...</P></BODY></HTML> Fri, 27 Jul 2018 17:40:56 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Lightboard-Series-High-Availability-Architecture-with-R80-10/m-p/44447#M21769 Vladimir 2018-07-27T17:40:56Z