Good Afternoon Bernardo, 1. When a management server goes down the enforcement modules will continue to function due to them not being in a stand alone configuration also logs will be kept on the enforcement module as long as there is disk space.
2. In regards to question two if the management module crashes due to hardware failure as a fail safe option I would advise backing up the NG folder on the management module that contains all the configuration files prior too the crash if not then your limited too a few options so in other words you will need a new install of the management module that's why always I insist on backing up management modules every night in a production environment because they are your brains in a firewall environment. After the rebuild all it is basically is establishing SIC between the management module and enforcement points and pushing the policy you have retrieved from a last known good configuration e.g. (back up). Hope this helps. Jeremy Kaweesa -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Bernardo Santos Wernesback Sent: April 15, 2004 1:47 PM To: [EMAIL PROTECTED] Subject: [FW-1] What happens to a Checkpoint Cluster if Management Server Crashes? Hello everyone, I've been studying a bit about checkpoint and so far haven't seen documentation about the consequences of a Management Server crashing. Imagine that I have a cluster with 2 enforcement modules and onlye 1 management module. What happens if: 1) ... Management Server is unavailable? Do the enforcement modules still work? Is there a time limit? What happens to the logs, are they cached? 2) ... Management Server crashes completely and I have to reinstall the whole machine? Is it simply a matter of rebuilding the SIC trust between the enforcement modules and the management module and then downloading the policy from the enforcement modules? Thanks in advance for any thoughts on this subject. Best Regards, Bernardo. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
