Hello Sergio, Thank you very much for your answer.. So I have to wait for the next release.. I hope they make it in a short time.. Regards, Sibel
>>> Sergio Alvarez <[EMAIL PROTECTED]> 17.04.2008 18:36 >>> Hello Sibel, The main problem with Edge boxes centrally managed by an SMC, is the fact that there is no specific object to represent them as a failover (active/standby) or load balancing pair or cluster. If you are managing a couple of regular VPN-1 firewall modules in such configuration, there is an object to represent that cluster and that way the SMC "knows" that object represents 2 or more boxes, their real IPs and virtual IPs, but this is not possible with Edge boxes. Honestly I have not tried a load balancing scenario, but I have a couple of customers that have active/standby pairs of Edge boxes and the only way we managed to make them work in that way while being managed by a SMC was to use a virtual IP on the internal interface but NOT on the external one (which allows them, to communicate with the SMC), so the SMC sees both as separate devices and not as an HA pair. This off course causes an issue with routing on the external interface as if the active box goes down the IP changes, so my customer has to manually change a route on the upstream router if a problem comes up, but it was the best we could do given the situation. I discussed this with the Check Point tech support department and they said a future release will include the possibility of creating a "cluster" object for Edge boxes in active/standby or load balancing scenarios, but for now they had no further suggestions. Regards On Tue, Apr 15, 2008 at 11:53 PM, SIBEL MEREY <[EMAIL PROTECTED]> wrote: > Hi, > > We are using CP NGX R65 in head office and using edges in remote sites.. > And we manages edges with SmartCenter.. We want to use load balancing > properties of edges (firmware 7.5.48x), but it does not work. If we remove > central management with smartcenter it works. I think this is a bug. Have > you hear any announcement about this issue? > > Thanks > > Sibel > > > > Scanned by Check Point Total Security Gateway. > > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > -- Sergio Alvarez (506)8301342 Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
