Dedicated Sync Interfaces as an internal or external interface

[maddah87]

Hi,

Can one of the dedicated sync interfaces of 19100 or 19200 be used as an internal or external interface of a clustered environment.

early 2025 we had an issue of assigning one of the sync interfaces to an internal interface. we used different interfaces rather sticking in to that. Currently we try to match number of ports of one customer's req. If one of the sync can be used to internal or external interface we can refrain adding another line card.

[Martijn · Accepted solution]

The name of the port is just a name and to my knowledge you can use this port for any other type of interface.
But don't become confused when you see the name Sync in Gaia and SmartConsole in the interface section.

In ElasticXL the Sync is used for building the ExlasticXL setup so do not use the Sync in such setups.

[Bob_Zimmerman]

To help minimize potential confusion, you can build a bond and put the interface named Sync into the bond. That way, your topology says bond5.284 or whatever instead of Sync2.284. It keeps the interface name as an implementation detail, where it should be. Then if you want that interface to be 40g or 100g or whatever, you get a new card and change the physical interface which backs the bond.

[Chris_Atkinson]

Also refer to sk92755 for supported SFPs for the Sync ports.

[the_rock · Accepted solution]

Technically yes, it can be used for that. Personally, I would not do it, but thats just me. Anyone I know and ever worked with related to CP firewalls, used Sync as dedicated sync interface.

[Vincent_Bacher]

Same here.

[the_rock]

@Martijn made an  EXCELLENT point. Say you set it as external, but you cant actually change the name, it would ALWAYS show as SYNC...would be way too confusing.

[Vincent_Bacher]

This is why I would never use it as data interface.

[the_rock]

💯

[Vincent_Bacher]

Just as a heads-up: The competition from Sunnyvale, California actually lets you set an alias for an interface that fully replaces the original interface name. So unlike Check Point, you’ll actually see the alias name everywhere in the UI (and cli I think) instead of the default interface label.

[the_rock]

Yes sir, done that before lol