VSX Cluster Behavior on Standby VS

[Michalis89]

Hi,

I was troubleshooting an issue today at my work where we used Checkpoint VSX Configuration with VSLS High Availability mode.

The VSX cluster consists of two gateways. 

During the troubleshoot i saw that both VS's (at both Active and Standby Firewall) have arp entries for the same network. Furthermore, they do not even have the same arp entries for a specific network. For example some host are hitting the standby VS and some other hosts are hitting the active VS.

Why is this happening;;

During normal operation i think that all the arp entries must be alive only at the Active VS.

[PhoneBoy]

What version/JHF level?
Perhaps this also applies: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... 

[_Val_]

Did you experience a failover before troubleshooting started?

[Michalis89]

Thank you Val for your answer. No we did not make any failover recently.

[_Val_]

Then best is to take it with TAC. Please raise an SR