High Availability

[billw]

Is a ClusterXL license required to do high-availability? I'm only looking to do a primary-backup so that if my primary firewall fails, the secondary one takes over.

Isn't there a license called 'Checkpoint High Availability VPN-1 Gateway for 250 users' or is this something legacy?

I'm basically trying to find out if it need to buy ClusterXL to do high availability or if I can do without it.

[kva.kva]

I think you need "Additional VPN-1 Pro Gateways for Load Sharing and High Availability" or "VPN-1 Express Gateway for High Availability" (depending on you product).

ClusterXL provides load sharing for Check Point gateways, and is available in 2 sizes, for clusters up to 500 users and for clusters with more than 500 users. Licensed per cluster.

[Sergej]

Do not forget to look inside this document fidned by ddarby1 (there is also one better for partners, but it is hidden inside partner portal)
https://usercenter.checkpoint.com/uc...yLicensing.pdf
You can also look inside public pricelist http://pricelist.checkpoint.com/sections/main.asp

Additional VPN-1 Pro Gateways for Load Sharing and High Availability
250 CPMP-HVPG-250-NG $6,400
Note: Automatic Failover is included in Additional VPN-1 Pro Gateways - ClusterXL is required for Load sharing implementations.

ClusterXL for Load Sharing Add-on for VPN-1 Pro Enables load sharing by distributing traffic between clusters of redundant gateways so that the computing capacity of multiple machines may be combined to increase total throughput. License per cluster.

CusterXL is not needed for you. But I'm not sure if you need something else for you cluster (e.g. Smardefence for aditional gateway) CheckPoint pricelist is to complex for me. :)

[chillyjim]

Originally Posted by billw

Is a ClusterXL license required to do high-availability? I'm only looking to do a primary-backup so that if my primary firewall fails, the secondary one takes over.

Isn't there a license called 'Checkpoint High Availability VPN-1 Gateway for 250 users' or is this something legacy?

I'm basically trying to find out if it need to buy ClusterXL to do high availability or if I can do without it.

If you want Active/Standby you do not need ClusterXL.

The "Second gateway for HA" is what you want.

Pro version:
CPMP-HVPG-250-NG Enterprise Solutions Perimeter Security (VPN-1) High Availability VPN-1 Pro Gateways for 250 Users 250 $6,400

Express version:
CPXP-HVPX-250-NG Mid-Size Business Solutions Check Point Express High Availability VPN-1 Gateway for 250 users 250 $6,000

Express CI Version:
CPXP-CI-HVPX-250-NG Mid-Size Business Solutions Check Point Express VPN-1 Express CI for 250 users - secondary 250 $7,600