The Management HA scheme requires one primary Management Server, and at least one secondary Management Server. There is no limit to the number of secondary Management Servers. The first installed Management Server is automatically designated as primary, while every other Management Server added to the cluster is considered secondary. After the secondary Management Servers are properly initialized, no functional differences exist between the two Management Server types.
In normal circumstances, the active Management Server performs as a typical Management Server granting read/write access to the user. In contrast, standby Management Servers can only be accessed in read-only mode. Manual switching between active and standby Management Servers adds scalability and availability to basic Management Server functionality, reduces workload on Management Servers, and accelerates response to user requests. To enable manual switching, standby Management Servers' databases must be updated. This can be achieved as follows: * The Security Administrator can manually overwrite a standby Management Server's database from the Management High Availability Modules in SmartDashboard. * The Security Administrator can choose from a number of options for automated synchronization. Since every Management Server in an HA configuration can switch from active to standby mode and vice versa, logs should be forwarded either to one Management Server, or to a specially designated machine that is not a cluster member. Do not work with more than one active Management Server. When the Management Servers synchronize, one of the databases will be overwritten. Both the primary and secondary Management Server must be on the same operating system - either both Windows NT or both Solaris. Management HA is only supported in a distributed configuration. I love this solution it is a great solution from Check Point. Christopher McGill CCSA, CCNA, MCP ________________________________ From: Mailing list for discussion of Firewall-1 on behalf of Andrey Maluck Sent: Tue 24/05/2005 09:08 To: [email protected] Subject: [FW-1] High Availability Hi, Gurus. Following my previous question on Smart Center, actually the aim is to migrate from standalone installation (NG AI R55 HFA13) to High Availability New Mode cluster. Could you please share you experience. What are the things I should pay special attention and what are the possible problems I may encounter? Thanks in advance, Andrey. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
