- Products
- Learn
- Local User Groups
- Partners
- More
What’s New in Identity and Trust?
AI Security Masters
Security in the Pace of AI:
From Threat to Force Multiplier
CPX is Back!
Join us in Las Vegas, Vienna, and/or Bangkok!
Check Point Named a Leader
The Forrester Wave:
Enterprise Firewall Solutions, Q4 2026
What’s New in Agentic Network Orchestration
CheckMates Go:
Fun Ding
Hi All,
I'm building a new VSX in our environment and noticed that when creating virtual systems, they are not being created with HA and keep giving the 'HA module not started' when running the cphaprob stat command. i can't seem to figure out how to turn this on. Does anyone have any insight on this? I do have a TAC case open but figured I'd try to get some knowledge here as well.
This VSX cluster does have VSLS enabled.
HA status is, at least partially, a function of the installed policy.
No policy, no HA.
Have you installed policy to the VS in question?
Also what version/JHF is this?
This is on R81.20 take 84.
The policy actually keeps failing to push on the VS due to updatable object issue saying the package is missing on the gateway. I'm thinking this might be something related to DNS, as I've seen this error before due to a DNS issue.
I will say tho also, shouldnt the Virtual systems be automatically created with HA? regardless of a DNS issue.
HA status is, at least partially, a function of the installed policy.
No policy, no HA.
Thank you PhoneBoy. I definitely did not realize that the HA would show as not started if there was no policy.
Just to keep this thread up to date. it looks like the team who configured the switch side of things had changed the native vlan from the default, which is not supported. once that was changed back to default, we were able to push policy.
sk120684 documents this when working with Bonds.
As already mentioned, you have to install policy after VS creation.
If you have troubles with policy installation for existing policy package, try to create new policy package with any-any-any-drop rule as the only rule and install it on newly created VS.
We did try this and still failed. I will need to dig deeper internally once again and see if the networking side of things is configured properly. Thank you
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 29 | |
| 13 | |
| 5 | |
| 5 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 3 | |
| 3 |
Tue 17 Nov 2026 @ 08:30 AM (EST)
Bogota Breakfast & Hack: IA bajo control y ataques en vivo con Workspace SecurityTue 17 Nov 2026 @ 05:00 PM (CET)
AI Security Masters: Security in the Pace of AI: From Threat to Force MultiplierTue 17 Nov 2026 @ 11:00 AM (EST)
Under the Hood: Check Point SASE | Troubleshooting Like a ProTue 24 Nov 2026 @ 01:30 PM (GMT)
La nueva realidad de los ataques DDoS: autonomía, escala y el futuro de la defensaTue 17 Nov 2026 @ 05:00 PM (CET)
AI Security Masters: Security in the Pace of AI: From Threat to Force MultiplierTue 17 Nov 2026 @ 11:00 AM (EST)
Under the Hood: Check Point SASE | Troubleshooting Like a ProTue 24 Nov 2026 @ 01:30 PM (GMT)
La nueva realidad de los ataques DDoS: autonomía, escala y el futuro de la defensaWed 02 Dec 2026 @ 03:30 PM (GMT)
The New DDoS Reality: Autonomy, Scale, and the Future of DefenseTue 17 Nov 2026 @ 08:30 AM (EST)
Bogota Breakfast & Hack: IA bajo control y ataques en vivo con Workspace SecurityAbout CheckMates
Learn Check Point
Advanced Learning
WE SECURE YOUR AI TRANSFORMATION