topic Checkpoint Maestro Question in Hyperscale Firewall (Maestro)

Checkpoint Maestro Question

joon — Mon, 09 Sep 2024 01:03:06 GMT

How does HyperSync work in a Dual Site environment?

Each active connection has two local backups (on the local site) and a third backup connection on the second site (remote site.)
Each active connection has a local backup (on the local site) and a second backup connection on the second site (remote site.)
Each active connection has a local backup (on the local site) and a second backup connection on each of the MHOs.
Each active connection has a backup connection on the second site (remote site.)

There is a Security group of 10 Appliances and all of them are up and running. How many Appliances within a Security Group keep the same connection in its connection table in case of NAT?

Between 2 and 4
All 10
2
3

What is mean Failed to get remote orchestrator interfaces??

g_tcpdump command tcpdump differ??

Re: Checkpoint Maestro Question

AkosBakos — Mon, 09 Sep 2024 09:20:12 GMT

Hi Joon,

The last question first:

Q: g_tcpdump command tcpdump differ??

A: all traffic will captured on all SGM-s with g_ prefix.

Here is an informative link about HyperSync from Danny.

https://community.checkpoint.com/t5/Maestro/Check-Point-Maestro-FAQ/m-p/127280#M577

Akos

Re: Checkpoint Maestro Question

emmap — Thu, 12 Sep 2024 04:08:20 GMT

Each active connection has a backup entry on 1 SGM on the local site and 1 SGM on the other site. Whether NAT is involved or not this is the case.