Hi Chris,
I am setting up now the scenario you are describing with
securplatform. I hope I understand you right, the only thing I need
for Checkpoints-HA are two Managementserver and a crosscable?
--
Christian Franke <[EMAIL PROTECTED]>
--------------------------------------------------------
powered by Sun Java Linux Desktop
--------------------------------------------------------
2005/5/24, Chris McGill <[EMAIL PROTECTED]>:
> The Management HA scheme requires one primary Management Server, and at least
> one secondary Management Server. There is no limit to the number of secondary
> Management Servers. The first installed Management Server is automatically
> designated as primary, while every other Management Server added to the
> cluster is considered secondary. After the secondary Management Servers are
> properly initialized, no functional differences exist between the two
> Management Server types.
>
> In normal circumstances, the active Management Server performs as a typical
> Management Server granting read/write access to the user. In contrast,
> standby Management Servers can only be accessed in read-only mode.
>
> Manual switching between active and standby Management Servers adds
> scalability and availability to basic Management Server functionality,
> reduces workload on Management Servers, and accelerates response to user
> requests. To enable manual switching, standby Management Servers' databases
> must be updated. This can be achieved as follows:
>
> * The Security Administrator can manually overwrite a standby
> Management Server's database from the Management High Availability Modules in
> SmartDashboard.
>
> * The Security Administrator can choose from a number of options for
> automated synchronization.
>
> Since every Management Server in an HA configuration can switch from active
> to standby mode and vice versa, logs should be forwarded either to one
> Management Server, or to a specially designated machine that is not a cluster
> member.
>
> Do not work with more than one active Management Server. When the Management
> Servers synchronize, one of the databases will be overwritten.
>
> Both the primary and secondary Management Server must be on the same
> operating system - either both Windows NT or both Solaris.
>
> Management HA is only supported in a distributed configuration.
>
> I love this solution it is a great solution from Check Point.
>
> Christopher McGill
> CCSA, CCNA, MCP
>
> ________________________________
>
> From: Mailing list for discussion of Firewall-1 on behalf of Andrey Maluck
> Sent: Tue 24/05/2005 09:08
> To: [email protected]
> Subject: [FW-1] High Availability
>
>
> Hi, Gurus.
> Following my previous question on Smart Center, actually the aim is to
> migrate from standalone installation (NG AI R55 HFA13) to High
> Availability New Mode cluster.
> Could you please share you experience. What are the things I should pay
> special attention and what are the possible problems I may encounter?
>
> Thanks in advance,
> Andrey.
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>
> This e-mail and any attachment is for authorised use by the intended
> recipient(s) only. It may contain proprietary material, confidential
> information and/or be subject to legal privilege. It should not be copied,
> disclosed to, retained or used by, any other party. If you are not an
> intended recipient then please promptly delete this e-mail and any attachment
> and all copies and inform the sender. Thank you.
>
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
