Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Vlad_Voronko
Participant

ISP Redundancy (R80.10) - ISP monitored hosts question

Jump to solution

Hi,

I have a question about Advanced settings in ISP link configuration. It reads in the description "If any of the hosts in the list fail to respond, the Link is considered to be down" (see the picture). Is there any way to change this logic from "any of the hosts" to "all of the hosts"? In my opinion, "any of the hosts" logic might lead to significant amount of false positives on unstable links which might lead to frequent default route changes.

0 Kudos
1 Solution

Accepted Solutions
Timothy_Hall
Champion
Champion

Actually it is possible to do this, it is a "hidden" setting described here:

sk102848: How to configure ISP Redundancy Link to fail over only when all configured hosts are not a...

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

New 2021 IPS/AV/ABOT Self-Guided Video Series
now available at http://www.maxpowerfirewalls.com

View solution in original post

4 Replies
Danny
Champion
Champion

I don't think there is a way to change this logic. It's best practice to select only hosts on stable links.

Vlad_Voronko
Participant

Thanks for the reply, Danny. Well, I hope Checkpoint will add this feature in future releases.

Does anyone happen to know how many ping requests a security gateway sends towards the defined host? It can't be it just sends one ICMP request, right? Smiley Happy

0 Kudos
Timothy_Hall
Champion
Champion

Actually it is possible to do this, it is a "hidden" setting described here:

sk102848: How to configure ISP Redundancy Link to fail over only when all configured hosts are not a...

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

New 2021 IPS/AV/ABOT Self-Guided Video Series
now available at http://www.maxpowerfirewalls.com

View solution in original post

Vlad_Voronko
Participant

Thanks a lot, Timothy. That's exactly what I've been looking for.

I hope it works for R80.10 too Smiley Happy

0 Kudos