CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have 52 attendees signed up from 14 countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 8/25, 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Clustering (Security Gateway HA and ClusterXL)
Reload this Page State Syncronization and SSL (HTTPS)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-03-31
saramago saramago is offline
Junior Member
  
Join Date: 2008-03-25
Posts: 1
Rep Power: 0
saramago has an average reputation (10+)
Default State Syncronization and SSL (HTTPS)
Hi,

I have been searching here for a little while and I am looking for some information. When I have a high volume of traffic over certain protocols such as HTTP , DNS, and NTP, I disable syncing this traffic across the HA pair of firewalls to prevent overrun errors on the sync interface. If I disable this for HTTPS do you think I will see issues if a failover occurs ? Checkpoint's clusterxl users guide states that HTTP and some UDP traffic is ok not to sync, but I can not find anything about SSL.

-S
Reply With Quote
  #2 (permalink)  
Old 2008-03-31
Thorpuse Thorpuse is offline
Senior Member
  
Join Date: 2007-07-16
Posts: 446
Rep Power: 2
Thorpuse has an average reputation (10+)
Default Re: State Syncronization and SSL (HTTPS)
https should be fine, as long as the firewall is not terminating the SSL connection.
Reply With Quote
  #3 (permalink)  
Old 2008-03-31
chillyjim chillyjim is offline
Senior Member
  
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,627
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: State Syncronization and SSL (HTTPS)
The SSL is terminated at the web-server and not the gateway so you'll be fine. HTTP recovers well from temporary outages.
Reply With Quote
Reply

« Previous Thread | Next Thread »
Thread Tools
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 04:23.

Contact Us - CPUG Home Page - Archive - Top

Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0