Re: [FW-1] HA on NG

[Huovinen Jani <jani.huovinen@FW1-NOSPAMETERRA.FI>]

Well i dont agree with that. We are running 2 x ip520 with NG fr1 without "almost" any problems. Policy install tooks something like 10 sec for 20 rules.

well imo state sync works fine and you actually can set it up really easily ( 10 min ). Just waiting for fr2 to come so I can control witch services to sync.  only problem is

in this scenario that you just monitor physical errors.. no failover for checkpoint errors. any good solves ?

 

-Jani

 

-----Original Message-----
From: Aeon Hale [mailto:ahale@SOLUTIONWORKS.COM]
Sent: 13. maaliskuuta 2002 23:22
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: Re: [FW-1] HA on NG

 

I just setup HA on 2 IP530s running NG.  The VRRP part of the Nokia's (IPSO 3.4.2) works great, BUT NG is very, very slow on IPSO.  Even local commands such as all "fw" commands are sluggish.  Pushing policy takes anywhere from 5-10 minutes.  Checkpoint/Nokia's response to these issues are "they are normal for NG and ipso, hope they will be corrected soon".  I did not like that answer, but unfortunately, i'm not going to go back to 4.1.  As far as the redundancy and state sync, everything seems to be working fine, but we have not gone into full scale production yet.

 

My opinion, stay away from NG and ipso for now.  But this is no concern for you since you are running stonebeat.  But NG as a whole, i have had issues.

-----Original Message-----
From: Abraham, Elliott [mailto:Elliot.Abraham@BELLSOUTH.COM]
Sent: Wednesday, March 13, 2002 3:20 PM
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: [FW-1] HA on NG

Anybody set this up yet and play with it?  Looking for pro's/con's.  I currently have an environment with 4.1/stonebeat as the HA.  Any tips on setup/config would be appreciated.

 

Thanks

 

L. Elliott Abraham, CISSP

BTSI Security Specialist

work

abrahame@imcingular.com - ipager

 

 

**************************************************************************************************************************************************

"The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential, proprietary, and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from all computers."