Second SmartCenter Server

[pviana]

Hey Guys!

I`m a newbie on CheckPoint tecnology, and i need some help for this:

Currently, We have the following scenario: One SmartCenter Server NGX R62(SecurePlataform) managing another two Security Gateways Machines NGX R60-A (Solaris), ..and now i think to implement another second SmartCenter server (standby server)..
1. So, how can I do it?
2. I need to add another licence to make this procedure?
3. Exist any risk rellated with this (traffic dropped)?
4. If my primary Smartcenter server is down, the second take it automatically?

Cheers...

[mdiot]

Hello,

1. So, how can I do it?
Install a secondary smart center when you doi the wizzard. Same OS, same Check Point version as your primary.

2. I need to add another licence to make this procedure?
For Management High Availability you need 2 Smart Center licence and 1 Management HA licence.

3. Exist any risk rellated with this (traffic dropped)?
It is the management so there is no traffic concern.

4. If my primary Smartcenter server is down, the second take it automatically? Quasi. Normally you parameter the FW in order they log to both smart center. Configuration synchronization is done automatically or manually as you want. Then for the gui you can choose whic one you want but for example if you log to the secondary you can force it to pass primary.

[jaskaran224]

Configuration synchronization is done automatically or manually as you want------

Is it required to have sync (kind of heartbeat interface) between 2 managment servers? and how to manually sync the configuration..... ?

[chillyjim]

Originally Posted by jaskaran224

Is it required to have sync (kind of heartbeat interface) between 2 managment servers?

No it will talk over the primary interface. The sync traffic is not like that of a firewall's, its only policy and like.