topic Re: Traffic Distribution within SGMs who has different downlinks in Hyperscale Firewall (Maestro)

Traffic Distribution within SGMs who has different downlinks

starmen2000 — Sat, 03 Feb 2024 12:46:48 GMT

Hi mates,

Quick question, How does Orchestrator distribute traffic between two appliances in the same Security Group when one of them has a single downlink and the other has two downlinks?

Thanks

Re: Traffic Distribution within SGMs who has different downlinks

Wolfgang — Sun, 04 Feb 2024 17:46:52 GMT

@starmen2000 distribution will be the same. That's why it's recommended to use the same downlinks for all SGMs of SecurityGroup. See Configuration of Downlinks for Maestro Appliances

"5. We recommend that each appliance be plugged into each MHO with the same number of downlink ports so that each SGM receives and transmits the same throughput."

Re: Traffic Distribution within SGMs who has different downlinks

MarcuzShinz — Wed, 03 Jul 2024 03:12:53 GMT

This means it's 50/50 %,right? or 33.3/66.7 %?

Re: Traffic Distribution within SGMs who has different downlinks

Wolfgang — Wed, 03 Jul 2024 06:37:46 GMT

@MarcuzShinz 50/50 is default for two appliances if you have the same models in your SG. Distribution is calculated and can be configured with weights of the security members Configuring Weights for Security Group Members (checkpoint.com)

Re: Traffic Distribution within SGMs who has different downlinks

MarcuzShinz — Wed, 03 Jul 2024 09:27:37 GMT

Thanks bro, got it!