Secondary Check Point Manager integration with primary CP Manager.

[surajshinde]

Secondary Check Point Manager activity going on  and almost 2 hours completed and it is showing 60% "Sending Data to remote site" completed. PFA snapshot.

Is there any way to check live data transmission status from CLI? How much data transmitted ?

Migrate export database size of primary Check Point Manager is 3.2 GB and Data transmission going on Internet.

[PhoneBoy]

Why is the amount of data synced interesting?
Regardless I believe the full sync kicks off a task that can be monitored via an API (and thus a CLI) call.
You’ll have to use show-tasks to find the UID of the task in question and then show-task on the relevant task.

https://sc1.checkpoint.com/documents/latest/APIs/#cli/show-tasks~v1.8

[surajshinde]

Why is the amount of data synced interesting: Primary & Secondary Check Point Managers are at different location and connected over the internet. 

Is there alternate way to sync?

[PhoneBoy]

I don’t believe we instrument the amount of data being synced.
That’s probably an RFE.

And no, there isn’t an alternative method if you want to use management HA.
You might using this process to debug if this is taking an exceptionally long time: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[surajshinde]

At End We are getting Error Message ' Communication has been aborted with peer"

[surajshinde]

At the End of Synchronization it is showing " HA Status - Failed to sync with peer, communication has been aborted by peer"

[PhoneBoy]

Please open a TAC case here so we can assist with debugging this.

[_Val_]

There is certainly a timeout on sync transfer. Since the whole database is being sent over, I do not see any other option that a faster line. TAC can investigate and see if there is anything else other than the available bandwidth, though.

[the_rock]

I think your question about cli command to check this is very interesting...personally, I never heard of anything like that, but lets see if anyone can confirm. I would love to know if one exists, even for regular firewalls. The only one I know is cpview...

[_Val_]

did you try "show tasks" yet?

[surajshinde]

Than you.

Yes i tried.

[_Val_]

and?