Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
NahelFalhout1
Explorer
Jump to solution

Identity awareness node hiding behind the cluster

I am having a problem with one of my AI nodes. I got 2 nodes, one is Active, and the other one is Standby. 
Although the Standby node does not connect to the DNS, i was checking the FW logs and I saw that the requests sent from node IP but the answers coming on the Cluster IP. 

Is there any way to identify the issue or what exactly happening, Cuz I toke the node out of the cluster and worked fine with the DNS, after that i added it back, it worked for a couple of hours then started the communication with the Cluster IP again...

0 Kudos
1 Solution

Accepted Solutions
PhoneBoy
Admin
Admin

There is a "Cluster Fold" mechanism that changes how traffic originates from a node when it is in a cluster. 
You can disable it per: https://support.checkpoint.com/results/sk/sk34180 

View solution in original post

0 Kudos
2 Replies
PhoneBoy
Admin
Admin

There is a "Cluster Fold" mechanism that changes how traffic originates from a node when it is in a cluster. 
You can disable it per: https://support.checkpoint.com/results/sk/sk34180 

0 Kudos
AmirArama
Employee
Employee

you can also set a simple NO NAT rule from the standby member to the DNS server, it should work.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82
    CheckMates Events