Essential Check Point™ FireWall-1® NG: An Installation, Configuration, and Troubleshooting Guide
by Dameon D. Welch-Abernathy
Implementing High Availability
State Synchronization is a very important component for implementing High Availability. Without it, other firewalls that may be called in to take over will not know the current status of connections and will cause a break in connectivity. However, State Synchronization is not the only piece to this equation. Another component must be involved to allow other routers or hosts around the firewall to know which firewall to use at the time. Dynamic routing protocols can certainly be used to achieve this, but this is not always practical and comes with its own problems—namely, these protocols can create asymmetric routing.
All HA solutions for FireWall-1 provide for some sort of virtual IP address, which is shared between ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access