https://community.checkpoint.com/t5/Firewall-and-Security-Management/HA/m-p/89508#M6898 <P>&nbsp;</P> <P>Read more here "ClusterXL R80.40 Administration Guide":</P> <P><A href="https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_ClusterXL_AdminGuide/Content/Topics-CXLG/Introduction-to-ClusterXL.htm?tocpath=Introduction%20to%20ClusterXL%7C_____0#Introduction_to_ClusterXL" target="_self">Introduction to ClusterXL^</A><BR /><A href="https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_ClusterXL_AdminGuide/Content/Topics-CXLG/Active-Active-Mode.htm?tocpath=Active-Active%20Mode%20in%20ClusterXL%7C_____0#Introduction_..1" target="_self">Active-Active Mode in ClusterXL</A>&nbsp;</P> <P>Check Point ClusterXL aktive/aktive limitations:<BR />vpn - n<SPAN>ot supported.<BR />Threat Emulation - not supported.<BR /></SPAN></P> Tue, 23 Jun 2020 05:27:58 GMT HeikoAnkenbrand 2020-06-23T05:27:58Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/HA/m-p/89503#M6897 <P>Hi&nbsp;</P><P>am new to Checkpoint Firewall. Can any one assist me on this.</P><P>I have two Isp routers which are interconnected with two Checkpoint Firewall.&nbsp;</P><P>In this case; both WAN link implementations by HSRP Protocal are active / active and must be load-sharing mode only.&nbsp;<BR />By the way, CPoint firewall have 2 gateways to the provider router [VIP1 (active to router1), VIP2 (active to router2)] and choose the gateway to the internet via VIP1 or VIP2.</P><P>And the solution would be as follows&nbsp;<BR />- Router run hsrp (2 VIP gateway)<BR />- firewall select gateway<BR />- active/active links in load-sharing mode</P><DIV class="mceNonEditable lia-copypaste-placeholder">&nbsp;</DIV><DIV class="mceNonEditable lia-copypaste-placeholder">&nbsp;</DIV><DIV class="mceNonEditable lia-copypaste-placeholder">&nbsp;</DIV><DIV class="mceNonEditable lia-copypaste-placeholder">&nbsp;</DIV><DIV class="mceNonEditable lia-copypaste-placeholder">&nbsp;</DIV><DIV class="mceNonEditable lia-copypaste-placeholder">&nbsp;</DIV><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2020-06-23 10_12_58-.jpg" style="width: 282px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/6950i4DDAE3EC717EE169/image-size/large?v=v2&amp;px=999" role="button" title="2020-06-23 10_12_58-.jpg" alt="2020-06-23 10_12_58-.jpg" /></span></P><P>&nbsp;</P> Tue, 23 Jun 2020 02:23:28 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/HA/m-p/89503#M6897 cptech17 2020-06-23T02:23:28Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/HA/m-p/89508#M6898 <P>&nbsp;</P> <P>Read more here "ClusterXL R80.40 Administration Guide":</P> <P><A href="https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_ClusterXL_AdminGuide/Content/Topics-CXLG/Introduction-to-ClusterXL.htm?tocpath=Introduction%20to%20ClusterXL%7C_____0#Introduction_to_ClusterXL" target="_self">Introduction to ClusterXL^</A><BR /><A href="https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_ClusterXL_AdminGuide/Content/Topics-CXLG/Active-Active-Mode.htm?tocpath=Active-Active%20Mode%20in%20ClusterXL%7C_____0#Introduction_..1" target="_self">Active-Active Mode in ClusterXL</A>&nbsp;</P> <P>Check Point ClusterXL aktive/aktive limitations:<BR />vpn - n<SPAN>ot supported.<BR />Threat Emulation - not supported.<BR /></SPAN></P> Tue, 23 Jun 2020 05:27:58 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/HA/m-p/89508#M6898 HeikoAnkenbrand 2020-06-23T05:27:58Z