Hi all,
Im trying to deploy two Checkpoint 3800s with ClusterXL.
Ive enabled clusterXL using cpconfig. And its telling me I need a policy pushed in order to start the HA module.
FW02:0]# cphastart
cphastart: Policy should be installed to run the command
I understand the clusterXL settings will be primarily deployed from SMS server. But from the local firewall point of view theres no HA sync interface, so Im trying to understand how the firewalls physically connect for HA sync. Is it just a matter of enabling HA sync on one of the ETH ports, and connecting back to back?
Im running R80.40, and ultimately they will be managed by an Azure SMS server.
Note, the boxes are not licensed yet. Ideally this will be deployed from the Azure SMS centrally.
One other question as an aside, when managing on prem FWs from an Azure SMS server, how does the licensing work, in terms of the central IP address - does it make more sense to do local licensing?
Cheers.
