cancel
Showing results for 
Search instead for 
Did you mean: 
Post a Question
Highlighted
Employee+
Employee+

Lightboard Series: High Availability Architecture with R80.10

This video elaborates on Check Point’s High Availability architecture in security management servers, in what sense it defers from previous versions and its benefits.

5 Replies

Re: Lightboard Series: High Availability Architecture with R80.10

Tasty learning byte - for me, the duration, topics, depth of explanations, visual aids are quite adequate.

[Aha moment] So the send_command which was able (up to R80) to switch roles and to trigger sync is no longer working because it does not interacts with CPM which is handling delta syncs. In R80.x there is no other way than SmartConsole to trigger a full sync or role switch

However, it seems that FWM is still involved - e. g. interrupting an initial Full Sync (which left the secondary server inaccessible via SmartConsole/mgmt._cli, with the full sync in progress, try later message and the primary server unable to retry the Full Sync) left no traces in cpm.elg with cpm_debug.sh -t HA -s DEBUG (R80.10 w JHF T112) and only clearing the status in $FWDIR/conf/mgha allowed the Full Sync to be restarted - the outdated sk80060, Debugging Management HA synchronization, might still be useful.

0 Kudos
Admin
Admin

Re: Lightboard Series: High Availability Architecture with R80.10

Nicely done, and timely, too!

Someone was just asking about Management HA in a local CheckMates Live event I was running.

0 Kudos
Vladimir
Pearl

Re: Lightboard Series: High Availability Architecture with R80.10

Nice, but would like to see and hear more about MDS HA specifics.

0 Kudos
Admin
Admin

Re: Lightboard Series: High Availability Architecture with R80.10

Vladimir
Pearl

Re: Lightboard Series: High Availability Architecture with R80.10

Going to watch it right now...

0 Kudos