Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
cptech17
Explorer

HA

Hi 

am new to Checkpoint Firewall. Can any one assist me on this.

I have two Isp routers which are interconnected with two Checkpoint Firewall. 

In this case; both WAN link implementations by HSRP Protocal are active / active and must be load-sharing mode only. 
By the way, CPoint firewall have 2 gateways to the provider router [VIP1 (active to router1), VIP2 (active to router2)] and choose the gateway to the internet via VIP1 or VIP2.

And the solution would be as follows 
- Router run hsrp (2 VIP gateway)
- firewall select gateway
- active/active links in load-sharing mode

 
 
 
 
 
 

2020-06-23 10_12_58-.jpg

 

0 Kudos
1 Reply
HeikoAnkenbrand
Champion
Champion

 

Read more here "ClusterXL R80.40 Administration Guide":

Introduction to ClusterXL^
Active-Active Mode in ClusterXL 

Check Point ClusterXL aktive/aktive limitations:
vpn - not supported.
Threat Emulation - not supported.

0 Kudos