topic The least impactful restart SG solution in Hyperscale Firewall (Maestro)

The least impactful restart SG solution

Windyshell — Mon, 12 Aug 2024 15:04:50 GMT

hi everyone,

I want to know the most compliant way to restart maestro's SG. Our environment consists of a security group composed of two firewalls. What operations can be used to minimize the impact on the network?

thanks

Re: The least impactful restart SG solution

Lesley — Mon, 12 Aug 2024 15:54:05 GMT

Just reboot and not g_reboot (this will reboot all members).

After restart you can confirm status with asg monitor

You could consider like written in upgrade guide te take the member out of the cluster before restart:

Set Security Group Members in the Logical Group "A" to the state "DOWN":

g_clusterXL_admin –b <SGM IDs in Group "A"> down

Example:

[Expert@HostName-ch0x-0x:0]# g_clusterXL_admin -b 1_1-1_4 down

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Maestro_AdminGuide/Topics-Maestro-AG/Installing-Uninstalling-Hotfix-on-Security-Group-Members.htm?Highlight=reboot

Re: The least impactful restart SG solution

Windyshell — Mon, 12 Aug 2024 17:47:47 GMT

Thanks bro