High-Availability and Multiple Entry Point Configurations

If your firewall is configured into a High-Availability (HA) configuration, it is possible to use the Gateway Cluster feature to provide seamless failover of SecuRemote connections. Simply configure your gateway objects for each member of the cluster, then add them to the gateway cluster object. You configure all of your encryption schemes and keys within this object. When the SecuRemote client fetches the encryption domain, all of the physical IPs plus the virtual IP of the gateway cluster will be included as part of the gateway definition. This allows any system in the cluster to be used to process a SecuRemote connection.

In addition, it is now possible to have multiple firewalls responsible ...

Get Essential Check Point™ FireWall-1® NG: An Installation, Configuration, and Troubleshooting Guide now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.