Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Participant

ISP Redundancy (R80.10) - ISP monitored hosts question

Jump to solution

Hi,

I have a question about Advanced settings in ISP link configuration. It reads in the description "If any of the hosts in the list fail to respond, the Link is considered to be down" (see the picture). Is there any way to change this logic from "any of the hosts" to "all of the hosts"? In my opinion, "any of the hosts" logic might lead to significant amount of false positives on unstable links which might lead to frequent default route changes.

0 Kudos
1 Solution

Accepted Solutions
Highlighted
Champion
Champion

Actually it is possible to do this, it is a "hidden" setting described here:

sk102848: How to configure ISP Redundancy Link to fail over only when all configured hosts are not a...

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

R80.40 addendum for book "Max Power 2020" now available
for free download at http://www.maxpowerfirewalls.com

View solution in original post

4 Replies
Highlighted
Champion
Champion

I don't think there is a way to change this logic. It's best practice to select only hosts on stable links.

Highlighted
Participant

Thanks for the reply, Danny. Well, I hope Checkpoint will add this feature in future releases.

Does anyone happen to know how many ping requests a security gateway sends towards the defined host? It can't be it just sends one ICMP request, right? Smiley Happy

0 Kudos
Highlighted
Champion
Champion

Actually it is possible to do this, it is a "hidden" setting described here:

sk102848: How to configure ISP Redundancy Link to fail over only when all configured hosts are not a...

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

R80.40 addendum for book "Max Power 2020" now available
for free download at http://www.maxpowerfirewalls.com

View solution in original post

Highlighted
Participant

Thanks a lot, Timothy. That's exactly what I've been looking for.

I hope it works for R80.10 too Smiley Happy

0 Kudos