IPS Management During a Cluster Failover
You can configure how IPS
Check Point Software Blade on a Security Gateway that inspects and analyzes packets and data for numerous types of risks (Intrusion Prevention System). is managed during a cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. failover.
This occurs when one Cluster Member Security Gateway that is part of a cluster. takes over for a different Cluster Member to provide High Availability.
You must run this command in the Expert mode.
Syntax to configure the IPS behavior during a cluster failover
|
|
Parameters
|
Parameter |
Description |
|---|---|
|
|
Prefers connectivity (default). Keeps connections alive, even if IPS inspection cannot be guaranteed. |
|
|
Prefers security. Closes connections, for which IPS inspection cannot be guaranteed. |
Syntax to view the configured IPS behavior during a cluster failover
|
|
Explanation:
|
Output |
Current Configuration |
|---|---|
|
|
Prefers connectivity |
|
|
Prefers security |