NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] IP Clustering Issue



Sandra,

You might wanna check if the sync protocols (xslate and others) are allowed
between the cluster members. If they are not the traffic information is not
synchronized between them and there is no garantee that they know what
traffic is going through what firewall. The result is an unexpected drop of
legitimate packets as out of state.

You should check this doc:
http://www.digitalmigrations.com/Clustering_%20NG-AI.pdf. It is a very good
manual on how to install the solution.

Good luck!

Daniel Accioly Rosa, CISSP CCSE
Consultant
Global Infrastructure Services
Phone :55+(21) 3804-5110
Net : 692-5110
UNISYS Imagine it. Done.

This message, including its attachments, is confidential and its contents
are restricted to the addressee. If you have received this message by
accident, please discard its contents by removing it from your mailbox. Any
unauthorized use of this message, replication or dissemination is expressly
prohibited. Unisys is not responsible for the content or reliability of this
information..


-----Original Message-----
From: Sandra Iveth Amador Garcia [mailto:[email protected]]
Sent: domingo, 31 de agosto de 2003 11:58
To: [email protected]
Subject: [FW-1] IP Clustering Issue
Importance: High


Greets !

Hi Gurus, this is the enviroment:

2 Nokia IP 380, Using IPSO 3.7 B 23, Checkpoint AI.

Distributed Installation, just one smarcenter sever.

We have implemented, a Nokia IP Clustering, without problems in the
configuration
Have finished the proccess, and the master and the member works fine,
but we have a problem,

1) The external segment cannot communicate whit the internal network, in
the smartview tracker
   the packets are dropped by anti spoofing feature, but we don´t
understand the reason, because the topology
   is the same that we are using just one Appliance and it works great,
but with the cluster enabled it does
   not.


Any suggestion?

Thanks :)

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.