Matt,
I have done this with CheckPoint's HA product, Stonebeat, and Rainfinity
This includes the scenario of publishing 3 public ip addresses, or doing
the ip sharing thing.
The instructions you have are correct, except that you did not mention
setting up State table sharing.....
Regards,
CryptoTech
Matt Leist wrote:
Dear Firewall-1 Users, We want to be able
to failover our SecuRemote clients from our primary to secondary firewall
with our Stonebeat HA system. Checkpoint says we just need to turn
on IPSec NAT cluster and main (See SP3 Release Notes, page 4) in our objects.C
file. We are wondering what else might need to be done. Has
anyone had success in making this work? Thanks for any information, Matt Matt
Leist
Network Analyst
Ohio State University Medical Center
Information Systems
Phone
Fax
Email [email protected]
|
