https://community.checkpoint.com/t5/Firewall-and-Security-Management/VRRP-between-Checkpoint-and-Forcepoint-Clusters/m-p/157036#M27215 <P>Hi all,</P><P>we are planning to extend our infrastructure to a second data center (stretched cluster). On one side we have a Checkpoint FW cluster and on the other side we have a Forcepoint FW cluster. We want to have an active/passive scenario for the Gateways. This should be achieved using VRRP. Will this work using VRRP between the 2 clusters even if they are not from the same manufacturer? VRRP(or CARP) should be an open protocol and thus should do the job?!? Has anyone experience with such a scenario?</P><P>Any help is highly appreciated <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P><P>regards</P><P>Michl</P> Mon, 12 Sep 2022 12:18:48 GMT Michl 2022-09-12T12:18:48Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/VRRP-between-Checkpoint-and-Forcepoint-Clusters/m-p/157036#M27215 <P>Hi all,</P><P>we are planning to extend our infrastructure to a second data center (stretched cluster). On one side we have a Checkpoint FW cluster and on the other side we have a Forcepoint FW cluster. We want to have an active/passive scenario for the Gateways. This should be achieved using VRRP. Will this work using VRRP between the 2 clusters even if they are not from the same manufacturer? VRRP(or CARP) should be an open protocol and thus should do the job?!? Has anyone experience with such a scenario?</P><P>Any help is highly appreciated <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P><P>regards</P><P>Michl</P> Mon, 12 Sep 2022 12:18:48 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/VRRP-between-Checkpoint-and-Forcepoint-Clusters/m-p/157036#M27215 Michl 2022-09-12T12:18:48Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/VRRP-between-Checkpoint-and-Forcepoint-Clusters/m-p/157066#M27216 <P>While VRRP is an open standard (RFC-2338), I don't believe any vendor actually supports mixing and matching cluster members from different vendors.</P> <P>A failover between say Forcepoint and Check Point, while likely handled at the Layer 3 level, will fail spectacularly for any in progress connections as there is no state sync of Layer 7 information between the different vendor solutions.</P> Mon, 12 Sep 2022 14:30:57 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/VRRP-between-Checkpoint-and-Forcepoint-Clusters/m-p/157066#M27216 PhoneBoy 2022-09-12T14:30:57Z