You should use active/active mode only if your single gateway is not able to handle traffic/ CPU/ Me

[Asherh]

You should use active/active mode only if your single gateway is not able to handle traffic/ CPU/ Memory-Why

[PhoneBoy]

If you have a traditional Active/Active ClusterXL cluster and one member fails, then the other cluster member will have to shoulder the load of both members.
If both members are above 50% capacity and one fails, now your remaining member will be overloaded and that may cause additional issues.
As long as you understand/accept that tradeoff, it's fine.

If you need more capacity and don't want to sacrifice resiliency, your choices are to buy larger appliances or use Maestro.

[Asherh]

Ok,Thanks

There is another reasons not use active/active mode?

Asher

[Asherh]

Other reasons

[PhoneBoy]

If you need support for Load Sharing VPN in R80.20+, it's not supported.
See: https://community.checkpoint.com/t5/General-Topics/When-will-checkpoint-support-the-Load-Sharing-mod...
Also, there's some feature limitations with Load Sharing.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...