topic Re: Identity awareness node hiding behind the cluster in Firewall and Security Management

Identity awareness node hiding behind the cluster

ShadowNif — Mon, 19 Feb 2024 09:42:15 GMT

I am having a problem with one of my AI nodes. I got 2 nodes, one is Active, and the other one is Standby.
Although the Standby node does not connect to the DNS, i was checking the FW logs and I saw that the requests sent from node IP but the answers coming on the Cluster IP.

Is there any way to identify the issue or what exactly happening, Cuz I toke the node out of the cluster and worked fine with the DNS, after that i added it back, it worked for a couple of hours then started the communication with the Cluster IP again...

Re: Identity awareness node hiding behind the cluster

PhoneBoy — Fri, 01 Mar 2024 19:31:50 GMT

There is a "Cluster Fold" mechanism that changes how traffic originates from a node when it is in a cluster.
You can disable it per: https://support.checkpoint.com/results/sk/sk34180

Re: Identity awareness node hiding behind the cluster

AmirArama — Sun, 03 Mar 2024 16:08:43 GMT

you can also set a simple NO NAT rule from the standby member to the DNS server, it should work.