cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post

ISP Redundancy (R80.10) - ISP monitored hosts question

Jump to solution

Hi,

I have a question about Advanced settings in ISP link configuration. It reads in the description "If any of the hosts in the list fail to respond, the Link is considered to be down" (see the picture). Is there any way to change this logic from "any of the hosts" to "all of the hosts"? In my opinion, "any of the hosts" logic might lead to significant amount of false positives on unstable links which might lead to frequent default route changes.

0 Kudos
1 Solution

Accepted Solutions

Re: ISP Redundancy (R80.10) - ISP monitored hosts question

Jump to solution

Actually it is possible to do this, it is a "hidden" setting described here:

sk102848: How to configure ISP Redundancy Link to fail over only when all configured hosts are not a...

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com
4 Replies
Danny
Pearl

Re: ISP Redundancy (R80.10) - ISP monitored hosts question

Jump to solution

I don't think there is a way to change this logic. It's best practice to select only hosts on stable links.

Re: ISP Redundancy (R80.10) - ISP monitored hosts question

Jump to solution

Thanks for the reply, Danny. Well, I hope Checkpoint will add this feature in future releases.

Does anyone happen to know how many ping requests a security gateway sends towards the defined host? It can't be it just sends one ICMP request, right? Smiley Happy

0 Kudos

Re: ISP Redundancy (R80.10) - ISP monitored hosts question

Jump to solution

Actually it is possible to do this, it is a "hidden" setting described here:

sk102848: How to configure ISP Redundancy Link to fail over only when all configured hosts are not a...

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com

Re: ISP Redundancy (R80.10) - ISP monitored hosts question

Jump to solution

Thanks a lot, Timothy. That's exactly what I've been looking for.

I hope it works for R80.10 too Smiley Happy

0 Kudos