topic Re: sk105239 article not working when ISP redundancy configured in load sharing mode. in Firewall and Security Management

sk105239 article not working when ISP redundancy configured in load sharing mode.

Ankur_Datta — Mon, 15 Oct 2018 11:42:18 GMT

Hi All,

In my organization setup, I have 2 firewalls in cluster in active/standby mode and ISP redundancy configured in load sharing mode (50-50 ratio). The version firewall is running is R80.20.

There is only one default route configured on firewall pointing to ISP-1. I can see failover mechanism is working fine when ISP-1 goes down. checkpoint firewall removes default route pointing towards ISP1 and place default route pointing to ISP2.

But traffic is not traversing through ISP2 link. Traffic traverse through ISP-1 only even if i applied sk105239.

Any suggestions please?

Thanks

Re: sk105239 article not working when ISP redundancy configured in load sharing mode.

G_W_Albrecht — Mon, 15 Oct 2018 13:05:29 GMT

Looks like the mechanism explained in sk42636 Controlling connections configured with ISP Redundancy in Load Sharing mod. Other relevant SKs include sk25152 Static NAT fails for outgoing connections through gateway with ISP Redundancy in Load Sharing mode, sk61692 Troubleshooting ISP Redundancy, sk23630 Advanced configuration options for ISP Redundancy and of course sk32225 Configuring ISP Redundancy so that certain traffic uses specific ISP Link

Re: sk105239 article not working when ISP redundancy configured in load sharing mode.

Ankur_Datta — Tue, 16 Oct 2018 11:58:31 GMT

Hi Gunther,

Just wanted to know for sk25152 : this is valid for active connections. I mean to say if i am accessing any server and primary link goes down will then traffic will nat to backup isp public link and traverse through backup link or i need to re-intiate the connection to server?

Thanks

Re: sk105239 article not working when ISP redundancy configured in load sharing mode.

cmale — Wed, 18 Mar 2026 12:24:18 GMT

Did you ever figure this one out? I am having the same issue now. ISP A and ISP B are in a load sharing ISP Redundancy configuration. If I remove the ISP A link from the appliance, ISP B should take over, but doesn't and internet is lost until I plug ISP A back in.