State Syncronization and SSL (HTTPS)

[saramago]

Hi,

I have been searching here for a little while and I am looking for some information. When I have a high volume of traffic over certain protocols such as HTTP , DNS, and NTP, I disable syncing this traffic across the HA pair of firewalls to prevent overrun errors on the sync interface. If I disable this for HTTPS do you think I will see issues if a failover occurs ? Checkpoint's clusterxl users guide states that HTTP and some UDP traffic is ok not to sync, but I can not find anything about SSL.

-S

[Thorpuse]

https should be fine, as long as the firewall is not terminating the SSL connection.

[chillyjim]

The SSL is terminated at the web-server and not the gateway so you'll be fine. HTTP recovers well from temporary outages.