i'm not sure the hosts are related, but in order to investigate what is going on you can do the following:
first, i assume your cluster is in active/standby mode (healthy cluster).
1. prepare some workstation for testing
2. switch between cluster members
3. now from the workstation, run: ping 9.9.9.9
3.A if the ping doesn't work (no replies) do this:
A. run on both members the following command:
fw monitor -F "0,0,9.9.9.9,0,0" -F "9.9.9.9,0,0,0,0"
(https://support.checkpoint.com/results/sk/sk30583)
the filter used here with 9.9.9.9 is an example of internet address, and i'm filtering it once on the destination side (original connection), and once on the source side (for reply).
you can replace 9.9.9.9 with any internet ip address you want to test.
*the reason i tell you to run on both, it to verify that the traffic from workstation to internet and the replies are flowing only through the new active member, and not via the old active member (such as when the old ARP is stuck on some network device). once that's verified you can run only on the active member for the next tests.
B. copy all the outputs from both members to notepad, note which is active and which is standby.
3B. if the above ping worked, try to ping something that needs resolving, like ping cnn.co
if that doesn't work, figure out who is configured on the workstation as DNS server, and we will go from there:
A. if it's internal server, try to look for logs from that dns server to the internet, or between the workstations to this dns server.
B. you also can use the same fw monitor with custom filter to this dns server traffic).
4. if the ping to domains also works and you have resolving, but you can't open http/https pages than do the same fw monitor above and this time open browser and brose to http://9.9.9.9 or https://9.9.9.9
copy all outputs and paste here.
break fw monitor with ctrl+C
once you find what exactly doesn't work, you can also run fw ctl zdebug + drop on the active member let it run for 30sec, while you simulate the non working connection, copy and paste the output here.
break fw ctl zdebug + drop with ctrl+c
and then run: fw ctl debug 0 to reset the debugging.
(notice the zdebug consume CPU, so make sure you do that on proper maintenance window)
in addition to that looks for the logs for the non working connections (some for example), you can also take screenshots and paste here.
mention your workstation IP. and the non working connection you have tested while running fw monitor or debug.
.png "Wolfgang"){kind=avatar}
