topic Re: How ISP Redundancy works in Firewall and Security Management

How ISP Redundancy works

Matlu — Tue, 21 Nov 2023 21:26:15 GMT

Hello,

I currently have a customer who has enabled the ISP Redundancy mechanism.

We have 2 ISPs, and the feature is already enabled, but the monitoring of the links indicates that ISP1 is practically working with all the traffic.

The ISP Redundancy is enabled in Load Sharing mode, but I would think that it should "balance" the traffic in an "equal" way, or not?

The Load Sharing mode of ISP Redundancy guarantees that both links I have will be used equally, or not?

Is there a way to "define" the percentage of traffic load that each link should "process"?

Thanks for your comments.

Re: How ISP Redundancy works

the_rock — Tue, 21 Nov 2023 22:12:02 GMT

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_NextGenSecurityGateway_Guide/Topics-FWG/ISP-Redundancy-configuring.htm?tocpath=ISP%20Redundancy%20on%20a%20Security%20Gateway%7C_____1

Re: How ISP Redundancy works

Matlu — Tue, 21 Nov 2023 23:09:54 GMT

Buddy,

What is the most "practical" way to test ISP Redundancy in a Load Sharing mode?

If I have 2 ISPs, and I give ISP1 a 75 (Weight) and ISP2 a 25 (Weight).

Is there any way, from the same Check Point point of view, to "make sure" that this order that was declared in the configuration is "respected"?

Greetings.

Re: How ISP Redundancy works

the_rock — Tue, 21 Nov 2023 23:11:19 GMT

I dont know all the possible methods as far as %age goes, because I always implement HA method (find it works way better), but 75-25 split sounds reasonable.

Andy