Notwithstanding the answers from the other ppl on the good the bad and the ugly of CheckPoint management HA.
Quote:
Originally Posted by switzer  Do we have to put the NGX Firewalls in HA |
No - the firewalls have absolutely nothing to do with Management HA.
Quote:
Originally Posted by switzer do we have to put the Smart Servers in HA in order to synchronise the rule base or is there another way for them to synchronise say at midnight each day without putting them in HA as these are intended as Disaster Recovery and are not needed as HA. |
Management HA allows you to synchronise on one or more of the following occasions:
1) Policy Push
2) Policy Save
3) A Scheduled Event (at a certain TIME as you suggest in your post)
4) Manually by clicking a synchronise button.
Management HA is NOT like FW HA(Clustering) there is no heartbeat or synchronisation continually occuring - it only happens on one or more of the listed occasions.
In order for Management Synchronisation to occur you
DO have to have one Primary and one or more Secondary SmartCenter Servers configured in high Availability Mode - it is impossible to use the CheckPoint HA facility with a sort of Cold Standby Secondary - although thinking about it - as long as the Standby box is ONLINE when you choose to synch then that will work.