CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have 72 attendees signed up from 20 countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Clustering (Security Gateway HA and ClusterXL)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-05-29
hotice_ hotice_ is offline
Senior Member
 
Join Date: 2007-06-05
Location: Montreal,Canada
Posts: 152
Rep Power: 2
hotice_ has an average reputation (10+)
Default Newbie question: ClusterXL vs HA

Guys,
I have somewhat of a newbie question so please indulge me.

I'm confused as to the difference between ClusterXL vs High Availability.

Assuming we are in a 100% SPLAT world,

1)Do we HAVE to buy ClusterXL to have High availability even though we only want to do simple Active/Backup configuration?

2) Am I correct in assuming that ClusterXL IS mandatory in Load Sharing mode (either Unicast or Multicast Modes)

3) Well depending on answer of Q1, when I install a cluster in active/passive mode, do I Need to install ClusterXL module?
Reply With Quote
  #2 (permalink)  
Old 2008-05-29
sebastan_bach sebastan_bach is offline
Senior Member
 
Join Date: 2005-10-12
Posts: 308
Rep Power: 3
sebastan_bach has an average reputation (10+)
Send a message via Yahoo to sebastan_bach
Default Re: Newbie question: ClusterXL vs HA

hi clusterXL is th core component of high. availability in checkpoint.

in high availability there are 2 mode one is high availability which is ur active/passive setup where in only one firewall is active at a time. the other mode is load sharing mode also called active/active which could be either multicast or unicast mode.

without clusterXL u cannot achieve any kind of high availability in checkpoint.

hope this clears ur doubt.

regards

sebastan
Reply With Quote
  #3 (permalink)  
Old 2008-05-29
cciesec2006 cciesec2006 is offline
Senior Member
 
Join Date: 2006-09-26
Posts: 691
Rep Power: 2
cciesec2006 has an average reputation (10+)
Default Re: Newbie question: ClusterXL vs HA

in your situation, you do NOT have to buy ClusterXL license for
Active/Standby. You DO have to purchase ClusterXL load-sharing
license if you want to go with Active/Active multicast or unicast mode
Reply With Quote
  #4 (permalink)  
Old 2008-05-29
hotice_ hotice_ is offline
Senior Member
 
Join Date: 2007-06-05
Location: Montreal,Canada
Posts: 152
Rep Power: 2
hotice_ has an average reputation (10+)
Default Re: Newbie question: ClusterXL vs HA

Quote:
Originally Posted by sebastan_bach
without clusterXL u cannot achieve any kind of high availability in checkpoint.
Quote:
Originally Posted by cciesec2006 View Post
in your situation, you do NOT have to buy ClusterXL license for
Active/Standby.
Now I'm even more confused...I KNOW that if I one either LOAD sharing mode, I need Cluster XL...but if I DON'T need it and only wish Active/backup...?
Reply With Quote
  #5 (permalink)  
Old 2008-05-29
chillyjim chillyjim is offline
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,632
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: Newbie question: ClusterXL vs HA

ClusterXL comes in two flavors:

1. HA - High Availability (active/standby), this license is included with UTM & Power licenses

2. LS - Load Sharing (Active/Active), This is a for-charge license.

Note -- ClusterXL with Load Sharing is included with all Power and Integrated (aka FireFly) appliances as well as with the multi-core (U2, U4 and U8) licenses.
Reply With Quote
  #6 (permalink)  
Old 2008-05-30
hotice_ hotice_ is offline
Senior Member
 
Join Date: 2007-06-05
Location: Montreal,Canada
Posts: 152
Rep Power: 2
hotice_ has an average reputation (10+)
Default Re: Newbie question: ClusterXL vs HA

Quote:
Originally Posted by chillyjim View Post
ClusterXL comes in two flavors:

1. HA - High Availability (active/standby), this license is included with UTM & Power licenses

2. LS - Load Sharing (Active/Active), This is a for-charge license.

Note -- ClusterXL with Load Sharing is included with all Power and Integrated (aka FireFly) appliances as well as with the multi-core (U2, U4 and U8) licenses.
So a Power license contains ClusterXL for either HA modes (load sharing or active/passive).

Also, in my situation, i.e. a simple HA active/passive installation, I *would* have to install the ClusterXL module when installing SPLAT correct?
Reply With Quote
  #7 (permalink)  
Old 2008-06-02
chillyjim chillyjim is offline
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,632
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: Newbie question: ClusterXL vs HA

Quote:
Originally Posted by hotice_ View Post
So a Power license contains ClusterXL for either HA modes (load sharing or active/passive).

No, not the Power license but the Power-1 appliance.

Quote:
Also, in my situation, i.e. a simple HA active/passive installation, I *would* have to install the ClusterXL module when installing SPLAT correct?
Yes you need to install it, but in active/standby it does not require a license.
Reply With Quote
  #8 (permalink)  
Old 2008-06-02
hotice_ hotice_ is offline
Senior Member
 
Join Date: 2007-06-05
Location: Montreal,Canada
Posts: 152
Rep Power: 2
hotice_ has an average reputation (10+)
Default Re: Newbie question: ClusterXL vs HA

Thanks this clears it up!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 08:29.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0