Checkpoint cluster query

[Abhishek_Kumar1]

Hi all

If we have a firewall in cluster with multicast mode and active/active setup.

If some how sync interface will disconnected.

In this scenario traffic will pass with which gateway.

Will it use pivate number or any other thing it will decide to pass the packet?

Please explain the same.

[Danny]

In the event of a sync failure on a Load Sharing cluster it’s very likely that only the pivot will remain in ‚active attention‘ while the others are in ‚problem‘ state. Depending on the type of issue also all cluster nodes could be ‚active attention‘. Without sync you‘ll then have network issues. Therefore make sure to read sk92804 for sync redundancy options.

[JozkoMrkvicka]

And what about ClusterXL HA in active/standby mode? In case sync between nodes is managed by single cable from one node to another ? Once the cable is broken/unplugged, it should cause both members to become Active (split brain), or?

[Abhishek_Kumar1]

In your scenario your Active Firewall become in Active and in cluster status your it will show active attention and secondary device will show in down state.

it will never become Active/active after disconnecting sync cable

[Abhishek_Kumar1]

But I guess Pivot table works in Unicast only, correct me if I am wrong