https://community.checkpoint.com/t5/Firewall-and-Security-Management/HA-configuration-with-multiple-ISP/m-p/231687#M44682 <P>how to configure two ISP fail over when we are using multiple applications with public Ip address and NAT on checkpoint 81.20 9000 series firewall?&nbsp; Do we need to DNS fail over if primary ISP fail ?</P> Tue, 05 Nov 2024 00:14:24 GMT ddesai 2024-11-05T00:14:24Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/HA-configuration-with-multiple-ISP/m-p/231687#M44682 <P>how to configure two ISP fail over when we are using multiple applications with public Ip address and NAT on checkpoint 81.20 9000 series firewall?&nbsp; Do we need to DNS fail over if primary ISP fail ?</P> Tue, 05 Nov 2024 00:14:24 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/HA-configuration-with-multiple-ISP/m-p/231687#M44682 ddesai 2024-11-05T00:14:24Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/HA-configuration-with-multiple-ISP/m-p/231691#M44685 <P>Depends entirely on the routing and who the IP address belongs to, if they're specific to the ISP (non-portable) then something like DNS manipulations with corresponding NAT would be mandatory I would imagine.&nbsp;</P> Tue, 05 Nov 2024 03:28:44 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/HA-configuration-with-multiple-ISP/m-p/231691#M44685 Chris_Atkinson 2024-11-05T03:28:44Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/HA-configuration-with-multiple-ISP/m-p/231738#M44699 <P>If you don't have provider-independent IP addresses and aren't using BGP, then DNS changes will most certainly be required to fail over publicly hosted applications.</P> Tue, 05 Nov 2024 14:37:56 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/HA-configuration-with-multiple-ISP/m-p/231738#M44699 PhoneBoy 2024-11-05T14:37:56Z