topic Re: You should use active/active mode only if your single gateway is not able to handle traffic/ CPU in Firewall and Security Management

You should use active/active mode only if your single gateway is not able to handle traffic/ CPU/ Me

Asherh — Sun, 08 Dec 2019 12:17:40 GMT

You should use active/active mode only if your single gateway is not able to handle traffic/ CPU/ Memory-Why

Re: You should use active/active mode only if your single gateway is not able to handle traffic/ CPU

PhoneBoy — Mon, 09 Dec 2019 02:31:41 GMT

If you have a traditional Active/Active ClusterXL cluster and one member fails, then the other cluster member will have to shoulder the load of both members.
If both members are above 50% capacity and one fails, now your remaining member will be overloaded and that may cause additional issues.
As long as you understand/accept that tradeoff, it's fine.

If you need more capacity and don't want to sacrifice resiliency, your choices are to buy larger appliances or use Maestro.

Re: You should use active/active mode only if your single gateway is not able to handle traffic/ CPU

Asherh — Mon, 09 Dec 2019 08:05:08 GMT

Ok,Thanks

There is another reasons not use active/active mode?

Asher

Re: You should use active/active mode only if your single gateway is not able to handle traffic/ CPU

Asherh — Mon, 09 Dec 2019 08:06:08 GMT

Other reasons

Re: You should use active/active mode only if your single gateway is not able to handle traffic/ CPU

PhoneBoy — Mon, 09 Dec 2019 16:40:38 GMT

If you need support for Load Sharing VPN in R80.20+, it's not supported.
See: https://community.checkpoint.com/t5/General-Topics/When-will-checkpoint-support-the-Load-Sharing-mode-in-either-R80/m-p/58571/thread-id/11805#M11854
Also, there's some feature limitations with Load Sharing.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk101539