topic Re: Load Balancing on Checkpoint 15400 in Firewall and Security Management

Load Balancing on Checkpoint 15400

Phillip-83 — Mon, 01 Apr 2024 08:31:57 GMT

I am consulting for customers and received this question, can a CheckPoint 15400 running OS 15400 run the load balancing feature between Servers? If it can run, is the performance okay?

Re: Load Balancing on Checkpoint 15400

Chris_Atkinson — Mon, 01 Apr 2024 08:53:33 GMT

I wouldn't go as far as to recommend it but you can look into the "ConnectionControl" feature if you have simple requirements.

Note the 15400 hardware will reach end of engineering support soon.

Re: Load Balancing on Checkpoint 15400

Timothy_Hall — Mon, 01 Apr 2024 14:44:39 GMT

The ConnectControl functionality is still there, but I wouldn't recommend trying to push a huge amount of traffic through it. For a feature this old the traffic subject to it will almost certainly have to go F2F/slowpath through the gateway, it might even have to involve a security server process as well.

Re: Load Balancing on Checkpoint 15400

Bob_Zimmerman — Mon, 01 Apr 2024 15:32:09 GMT

To be clear, are you talking about hosting a VIP on the firewall, then taking traffic destined for that VIP and distributing it between real servers like an A10 Thunder or F5 LTM? That's ConnectControl.

Or are you talking about balancing traffic load between multiple Check Point servers to handle more than a single system is able to? That's either ClusterXL load balancing or Maestro.

Re: Load Balancing on Checkpoint 15400

the_rock — Mon, 01 Apr 2024 15:56:56 GMT

Honestly, if I were you, I would get an official written statement from TAC about it.

Just my personal opinion.

Andy