Checkpoint Active-Active Traffic Handling

Saranya_0305 — Thu, 29 May 2025 07:42:33 GMT

Dear Team,

We have two Firewall as JKTFW1 and JKTFW2
Mode: Cluster Load sharing Multicast 50/50

JKTFW1 and JKTFW2 having 5 interface:

-Mgmt
- eth1-01
- eth1-02
- eth1-03
- eth1-04

Cluster status show Active/Active and both Firewall JKTFW1 and JKTFW2 handle the traffic.

Question:

1. If JKTFW1 , Mgmt interface goes down then cluster status show below:

JKTFW1 > DOWN
JKTFW2 > Active

2. So is this the full fail-over happen like JKTFW2 handle the all traffic?

3. If eth1-01 interface goes down also status show same so question is , only eth1-01 interface is not handle by JKTFW1 and remaining interface handle because we configured Active/Active?

My requirement:

1. I don't want that if Mgmt. interface goes down also I don't want JKTFW1 cluster goes DOWN I still want that JKTFW1 handle the remaining interface traffic expect Mgmt. because Mgmt is down so is this possible ?????

Regards,

Saranya

Re: Checkpoint Active-Active Traffic Handling

Chris_Atkinson — Thu, 29 May 2025 11:45:07 GMT

You can make the MGMT interface private from a topology perspective (it won't have a VIP)

topic Checkpoint Active-Active Traffic Handling in Firewall and Security Management

Checkpoint Active-Active Traffic Handling

Re: Checkpoint Active-Active Traffic Handling