topic Re: No option to choose HA while setting up VSX Clusters in VM in Firewall and Security Management

No option to choose HA while setting up VSX Clusters in VM

cyberlad — Sun, 01 Sep 2024 17:16:10 GMT

Greetings Seniors and Friends

I am setting up a CP lab using Vmware which includes an SMS, two gateways to emulate VSX and VS. I am following the official VSX documentation from the CP website. However, at the point of creating the VSX clusters , the "VSX cluster platform" does not give option for HA mode as it is fixed on VSLS [see attached picture].

I have searched the community, reddit, google and other forums, I couldn't find anything on this which is why I created a post for this.

CP version : Check_Point_R81.20_T634

Thank you.

Re: No option to choose HA while setting up VSX Clusters in VM

PhoneBoy — Tue, 03 Sep 2024 12:38:29 GMT

Expected behavior.
In R81.10, we stopped allowing installations as VSX HA mode.
See: https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_VSX_AdminGuide/Topics-VSXG/VSX-Cluster-in-HA-Mode.htm

Re: No option to choose HA while setting up VSX Clusters in VM

cyberlad — Tue, 03 Sep 2024 12:41:02 GMT

Many thanks for clarifying @PhoneBoy .

Re: No option to choose HA while setting up VSX Clusters in VM

Ricki_Juntak — Mon, 16 Jun 2025 06:51:27 GMT

Hi Phoneboy,

I have question about this HA mode on the VSX cluster, after we finish wizard setup VSX gateway and install policy to the cluster VSX, we can check from CLI >cphaprob stat and we can see output Active(Member GW1) and Standby (Member GW2), my question is why when we test failover the active always back to Member GW1 not stay in member GW2? can we change that and if how?

Re: No option to choose HA while setting up VSX Clusters in VM

emmap — Mon, 16 Jun 2025 07:41:12 GMT

VSLS 'Active Up' mode was introduced in R80.40, you can set this in the vsx_util vsls menu.

https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_VSX_AdminGuide/Content/Topics-VSXG/CLI/vsx_util-vsls.htm?tocpath=Command%20Line%20Reference%7Cvsx_util%7C_____13

From memory though this only applies to virtual systems and not to the base cluster, which will remain in primary-up mode.

Re: No option to choose HA while setting up VSX Clusters in VM

Ricki_Juntak — Mon, 16 Jun 2025 11:01:22 GMT

Thank you Emmap,