1. yep, modules will run fine on their own with no management, if they can't contact the management server they will log locally, though obviously you won't be able to make any policy changes and will need to keep an eye on disk space (depending on how much you log)
2. yep, rebuild management, re-establish sic then push policy. if you really need redundancy can go HA on your management servers (have one running as primary, one redundant) and they will sync policy changes between themselves. Alternatively, if you don't want to stomach the extra license cost of HA management you can regularly ghost your management server or export its config so you can rebuild it quickly if required. cheers stu -----Original Message----- From: Bernardo Santos Wernesback [mailto:[EMAIL PROTECTED] Sent: 15 April 2004 18:47 To: [EMAIL PROTECTED] Subject: [FW-1] What happens to a Checkpoint Cluster if Management Server Crashes? Hello everyone, I've been studying a bit about checkpoint and so far haven't seen documentation about the consequences of a Management Server crashing. Imagine that I have a cluster with 2 enforcement modules and onlye 1 management module. What happens if: 1) ... Management Server is unavailable? Do the enforcement modules still work? Is there a time limit? What happens to the logs, are they cached? 2) ... Management Server crashes completely and I have to reinstall the whole machine? Is it simply a matter of rebuilding the SIC trust between the enforcement modules and the management module and then downloading the policy from the enforcement modules? Thanks in advance for any thoughts on this subject. Best Regards, Bernardo. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.mimesweeper.com ********************************************************************** ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
