AnsweredAssumed Answered

Question about Cluster fail-over and connections

Question asked by Scott Laudenslager on Jan 10, 2018
Latest reply on Jan 16, 2018 by Scott Laudenslager

Hello,

 

We have two 15400 gateways in Active/Standby Cluster XL configuration with the FW, IPS, URL Filtering, App Control,
AV, AB, and VPN blades active and R77.30. We have several connections that run during the day for significant file transfers to various backup systems. These connections establish under the PXL path as I haven't worked out which blade is preventing the SecureXL path yet for these transfers (I have exclusions set in IPS and AV blades, but need to test an App Control/URL Filtering change tomorrow).

 

We observed that if a cluster fail-over occurs, the connection is moves onto the secondary member under the SecureXL path and the transfer speed increases 2-4x and CPU usage drops from 95+ percent to <50%. We were wondering if anyone else has seen this behavior and is supposed to be normal? If the connection is terminated and restarted, it will come up under the PXL path.

 

Thanks,

 

Scott L.

Outcomes