Open Frames Download Complete PDF Send Feedback Print This Page

Previous

Next

Working with the Distribution Mode

The Distribution Mode is the way that an SSM assigns incoming traffic to SGMs. These are the supported Distribution Modes:

Mode

Description

Applies to

User

Packets are assigned to an SGM based on the packet destination.

An SSM

Network

Packets are assigned to an SGM based on the packet source.

An SSM

General

Packets are assigned to an SGM based on both the packet source and destination.

All SSMs in the 61000/41000 Security System

Per-Port

Each SSM data interface is configured separately as User mode or Network mode.

SSM data interface

Note: User and Network modes always work together and are known collectively as the User/Network mode.

By default, the 61000/41000 Security System automatically configures the Distribution Mode. You can manually assign the General mode as necessary. There can be some scenarios where you must manually assign the General mode. The system does not automatically assign the General mode, with these exceptions:

  • For Security Gateway deployments, the General mode is automatically assigned if there is at least one Bridge Mode interface.
  • For VSX environments, the General mode is automatically assigned if there is at least one Virtual System configured in the Bridge mode.

Related Topics

Automatic Distribution Configuration (Auto-Topology)

Setting and Showing the Distribution Configuration

Configuring the Interface Distribution Mode (set distribution interface)

Showing Distribution Status

Running a Verification Test (show distribution verification)

 
Top of Page ©2014 Check Point Software Technologies Ltd. All rights reserved. Download Complete PDF Send Feedback Print