- Products
- Learn
- Local User Groups
- Partners
- More
Check Point Jump-Start Online Training
Now Available on CheckMates for Beginners!
Welcome to Maestro Masters!
Talk to Masters, Engage with Masters, Be a Maestro Master!
ZTNA Buyer’s Guide
Zero Trust essentials for your most valuable assets
The SMB Cyber Master
Boost your knowledge on Quantum Spark SMB gateways!
Check Point's Cyber Park is Now Open
Let the Games Begin!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
CheckFlix!
All Videos In One Space
Does the company have any manual on how to test the failover of a security gateway cluster?
For example, when the link load is high, when network availability is down, when the first node is down, etc.
Different variations on the testing methodology are of interest.
The ClusterXL admin guide will cover the commands for initiating a graceful failover.
Link load itself is not a failover criteria, but depending on the scenario could lead to CCP loss which if significant enough _might_ appear similar to a link failure (disconnecting cable).
Rebooting / powering off a member is also a valid test.
Could you please clarify the section in the admin manual where I could see the Failure testing methodology.
Hello In the admin guide, look for "How to Initiate Cluster Failover"
Run the command clusterXL_admin down should failover the device
The sk55081 Best Practices - Manual fail-over in ClusterXL might also help - it explains how to perform a manual (controlled) failover in Check Point cluster while maintaining full connectivity with each cluster member, keeping interference with cluster's operations at a minimum.
Worth noting: if you use 'clusterXL_admin down' to force a failover, remember to run 'clusterXL_admin up' afterwards. The admin_down status sticks around until you manually clear it (or reboot the member). I've seen people forget to clear it before, only to take an outage when they have a real failure on the other member.
I always run it as 'clusterXL_admin down;clusterXL_admin up'.
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY