CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Clustering (Security Gateway HA and ClusterXL)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-12-08
Member
 
Join Date: 2007-02-17
Posts: 54
Rep Power: 2
ppawlo has an average reputation (10+)
Default what, if not HA

Hi everyone. I want to implement HA in my company. Now I have been thinking about HA of Checkpoint but I do not think so is a good idea.

I heard something about load balancer of other vendors.
Have you got more experience with other solutions? Can you give me advice /example other ways?

Regards
Pawel
Reply With Quote
  #2 (permalink)  
Old 2007-12-09
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,660
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: what, if not HA

Check Point's HA code is fine. It is also statefull, whereas if you use an external device, it will not be.

Why do you think CHKP's HA isn't a good way to go?
Reply With Quote
  #3 (permalink)  
Old 2007-12-10
Senior Member
 
Join Date: 2007-01-18
Location: London
Posts: 375
Rep Power: 2
MarioL has an average reputation (10+)
Default Re: what, if not HA

A long time ago, the sync was quite slow, but now it works quite well. The only drawback I can think of is the extra module license required, but then again you will need that anyway.
Reply With Quote
  #4 (permalink)  
Old 2007-12-28
Junior Member
 
Join Date: 2007-12-26
Posts: 6
Rep Power: 0
dinesh_ymca has an average reputation (10+)
Default Re: what, if not HA

Hi,
If you use nokia box for running checkpoint then you ca run active/active using IPSO nokia feature. You donot need to have a HA license of checkpoint in that case.
Best Regards
Dinesh
The world of technology
(good technical articles)
Reply With Quote
  #5 (permalink)  
Old 2007-12-29
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,660
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: what, if not HA

Quote:
Originally Posted by dinesh_ymca View Post
Hi,
If you use nokia box for running checkpoint then you ca run active/active using IPSO nokia feature. You donot need to have a HA license of checkpoint in that case.
You do not need a license for HA functionality but you do need the 2nd module (FW gateway) license.
Reply With Quote
  #6 (permalink)  
Old 2007-12-30
Junior Member
 
Join Date: 2007-12-26
Posts: 6
Rep Power: 0
dinesh_ymca has an average reputation (10+)
Default Re: what, if not HA

HI,
Yes you are right, you will need a second license for the second gateway.
Best Regards
Dinesh
The world of technology
(good technical articles)
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 11:36.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0