High-Availability and Multiple Entry Point Configurations
If your firewall is configured into a High-Availability (HA) configuration, it is possible to use the Gateway Cluster feature to provide seamless failover of SecuRemote connections. Simply configure your gateway objects for each member of the cluster, then add them to the gateway cluster object. You configure all of your encryption schemes and keys within this object. When the SecuRemote client fetches the encryption domain, all of the physical IPs plus the virtual IP of the gateway cluster will be included as part of the gateway definition. This allows any system in the cluster to be used to process a SecuRemote connection.
In addition, it is now possible to have multiple firewalls responsible ...
Get Essential Check Point™ FireWall-1® NG: An Installation, Configuration, and Troubleshooting Guide now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
