The difference is the price of the license.
cheers -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Ramakrishnan Pillai Sent: Viernes, 19 de Mayo de 2006 12:11 p.m. To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Subject: Re: [FW-1] Cluster - Load sharing/High availability High availability does not provide load sharing and hence you don't nead a load sharing license CLUSTERXL License. You only need a HA license for the other gateway...RK >>> [EMAIL PROTECTED] 5/19/2006 2:38 AM >>> Thanks Zubair, I read that too. I have downloaded the doco from checkpoint site. What you posted is just on the PDF. Thanks for you reply. Here is my question: What I want is to have load share among the cluster members and I can patch up one cluster member without having a down time if needed. Does that mean Load Sharing has the good bit of High availability plus load sharing? If it is, why there is a High Availability options available? I have also read more about the VPN tunnel setup on a cluster (it seems that if I want to have a vpn tunnel setup from a 3rd party, I have to somehow get my third party and one of my cluster setup a sticky connection). I assume I can do it on my CP cluster because is under my control. But I have no control on a 3rd party. They may not use CP as their firewall. Does that mean High availability Cluster is a better choice in my case? Cheers, Clive -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Zubair Jalal Sent: Friday, 19 May 2006 3:57 PM To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Subject: Re: [FW-1] Cluster - Load sharing/High availability Load Sharing Load Sharing distributes traffic within a cluster of gateways so that the total throughput of multiple machines is increased. In Load Sharing configurations, all functioning machines in the cluster are active, and handle network traffic (Active/Active operation). If any individual Check Point gateway in the cluster becomes unreachable, transparent failover occurs to the remaining operational machines in the cluster, thus providing High Availability. All connections are shared between the remaining gateways without interruption. High Availability High Availability allows organizations to maintain a connection when there is a failure in a cluster member, without Load Sharing between cluster members. In a High Availability cluster, only one machine is active (Active/Standby operation). In the event that the active cluster member becomes unreachable, all connections are re-directed to a designated backup without interruption. In a synchronized cluster, the backup cluster members are updated with the state of the connections of the active cluster member. In a High Availability cluster, each machine is given a priority. The highest priority machine serves as the gateway in normal circumstances. If this machine fails, control is passed to the next highest priority machine. If that machine fails, control is passed to the next machine, and so on. regards Zubair -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] Behalf Of Clive Luk Sent: Friday, May 19, 2006 11:02 AM To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Subject: [FW-1] Cluster - Load sharing/High availability Dear CP gurus, I have just one question regarding the clustering on NGX60. High Availability Will have 2 or more members. When the primary cluster down the secondary will pickup. Without load sharing in between, Load Sharing Will have 2 or more members. Loan will share among members. For example, When one of the cluster member die. All load will go to the active member. So, I am not sure if I under that correctly. Please correct me if I am wrong. Because I want to setup a cluster firewall in my work area. I want to choose the one which is suitable for me. What I want is to have load share among the cluster members and I can patch up one firewall without having a down time if needed. Does that mean Load Sharing has the good bit of High availability plus load sharing? If it is, why there is a High Availability options available? Thanks in advance! ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
