Re: [FW1] High Availability module

[CryptoTech <cryptotech@FW1-NOSPAMgmx.de>]

Rodney,
1) Yes
2) SecuRemote is Free, LDAP is licensed on Management server, so the answer for both is NO
3) If you are referring to creating a cold backup, then yes, otherwise, no
4) Yes, all ip's will be the same, except for the sync connection.
5) Yes, it works.  It was fairly easy to setup and works reliably with no tuning of the box or network.  It is, as it was designed to be, a very simple, reliable solution.

#5 is just an opinion, I guess you could read the hashed discussion on securepoint of the last time the HA vendors discussed the products.

;-)
CryptoTech

Rodney Lacroix wrote:

> I apologize for this post, since there are so many in the list regarding the HA module - but it took so long to search through them, I thought it would be easier just to post the question:
>
> In reviewing failover, and looking at the HA module from CheckPoint, I have the following questions:
>
> 1) Do you need to purchase another CheckPoint FW1-VPN1 license for the failover firewall server?
> 2) Do you need to purchase licensing for ALL of the additional modules on the failover server (LDAP, SecuRemote, etc.)?
>
> or
>
> 3) Can you simply transfer the licenses from the existing firewall to the failover?
> 4) I assume that the public IP's need to be identical (as well as the internal, DMZ, etc. interfaces), correct?
> 5) Does it work?  How well?
>
> Thanks in advance.
>
> Rodney Lacroix
>
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================