Maestro Masters
Round Table session with Maestro experts
We continue answering your questions, collected before the Maestro Masters Round Table event. This is the second batch. The first part can be found here.
Q: When we upgrade our Maestro appliance environment, should we experience any connectivity loss? And what about installing Jumbo HFAs?
A: Maestro appliance (orchestrator) does not keep a connection table and does not manage a cluster behind it from the connections’ synchronization perspective. Zero downtime upgrade to the major version is not supported yet. We plan to support the Zero Downtime Upgrade scenario with the next release: R81.20. Minor upgrades (JHFs) should not cause connectivity issues during the upgrade, however, since it includes a reboot of cluster members and fail-over to others, it may cause some connections to fail in specific scenarios.
Q: Is there a way to find the Orchestrator names/IP addresses from the security groups?
A: Orchestrators are discovered and accessible from any of the security groups’ members. You easily can access it using the internal CIN network, which is the backplane of the Maestro setup.
Q: If there is an outage, for example, caused by another admin changing a route, what commands and info should I collect to get to the bottom of the issue?
A: We advise you to start any troubleshooting session with the following commands:
Stay tuned for more!
We continue answering your questions, collected before the Maestro Masters Round Table event. This is the second batch. The first part can be found here.
Q: When we upgrade our Maestro appliance environment, should we experience any connectivity loss? And what about installing Jumbo HFAs?
A: Maestro appliance (orchestrator) does not keep a connection table and does not manage a cluster behind it from the connections’ synchronization perspective. Zero downtime upgrade to the major version is not supported yet. We plan to support the Zero Downtime Upgrade scenario with the next release: R81.20. Minor upgrades (JHFs) should not cause connectivity issues during the upgrade, however, since it includes a reboot of cluster members and fail-over to others, it may cause some connections to fail in specific scenarios.
Q: Is there a way to find the Orchestrator names/IP addresses from the security groups?
A: Orchestrators are discovered and accessible from any of the security groups’ members. You easily can access it using the internal CIN network, which is the backplane of the Maestro setup.
Q: If there is an outage, for example, caused by another admin changing a rout
...Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 4 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY
