[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [hobbit] Checkpoint High Availability Monitoring



L.M.J. a écrit :
Hi, once again ;)

  I would like to monitor the HA cluster between 2 Checkpoint Firewall.

  Several time a month, the cluster failed down, sound like one of the
numerous Ethernet card seems to be off during a couple of second, thus
the HA cluster switch to safe mode. I would like to detect this nasty
state from the Hobbit server to broadcast an alarm.

you have some commands that need to be parsed to do so.
try "cphaprob -a if" and "cphaprob state".
  I don't know how the 2 Firewalls exchange health information (maybe via
Heartbeat). Anyone already figure out how to monitor this issue?
they exchange information via heartbeat.
you can set up on smartdashboard the "fail over" tracking option.
the main difficulty in my opinion is to be sure your monitoring will also work if the HA
priority changes.

there is also an active firewall 1 archiev if you wish to ask the question to firewall-1 users.
  Thanks by advance,

    LMJ