ISP Redundancy (R80.10) - ISP monitored hosts question

[Vlad_Voronko]

Hi,

I have a question about Advanced settings in ISP link configuration. It reads in the description "If any of the hosts in the list fail to respond, the Link is considered to be down" (see the picture). Is there any way to change this logic from "any of the hosts" to "all of the hosts"? In my opinion, "any of the hosts" logic might lead to significant amount of false positives on unstable links which might lead to frequent default route changes.

[Danny]

I don't think there is a way to change this logic. It's best practice to select only hosts on stable links.

[Vlad_Voronko]

Thanks for the reply, Danny. Well, I hope Checkpoint will add this feature in future releases.

Does anyone happen to know how many ping requests a security gateway sends towards the defined host? It can't be it just sends one ICMP request, right?

[Timothy_Hall · Accepted solution]

Actually it is possible to do this, it is a "hidden" setting described here:

sk102848: How to configure ISP Redundancy Link to fail over only when all configured hosts are not a...

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

[Vlad_Voronko]

Thanks a lot, Timothy. That's exactly what I've been looking for.

I hope it works for R80.10 too