Synchronized Cluster?
ClusterXL virtual IP addresses?
Cluster Addresses on Different Subnets?
ClusterXL interfaces?
Synchronization Network?
ClusterXL synchronization interface?
ClusterXL Member IP Address?
Cluster Control Protocol?
Cluster Control Protocol port?
What services are synchronized through CCP?
Must Members in a ClusterXL Load Sharing configuration be synchronized?
Do Members in a ClusterXL High Availability configuration have to be synchronized?
How State Synchronization Works (Full Sync Mode)?
How State Synchronization Works (Delta Sync Mode)?
Which services are not synchronized by default in ClusterXL?
What services should not be synchronized in ClusterXL?
What latency and packet loss should the synchronization network guarantee?
Can there be a Router that joins the synchronization interfaces of both firewalls?
What are the restrictions regarding members of a ClusterXL?
What happens during a user-authenticated connection when a failover occurs?
What happens during a client-authenticated or session-authenticated connection when a failover occurs?
What are Delayed Notifications and what services do they apply to?
What is a Sticky Connections?
What feature of ClusterXL makes a Sticky connection?
Sticky Decision Function is requerid for
What happens to members of a ClusterXL when Sticky Decision Funtion is enabled and VPNs are used?
In which file and on which Device is a Tunnel Group created?
What is a Tunnel Group used for?
Is a Tunnel Group shared between active cluster members authomatic failover?
What are Non-Sticky Connections?
Could it be a connection involving Static NAT, encrypted connections or Hide NAT being non-sticky?
Is it necessary to activate the synchronization mechanisms to prevent a member from discarding traffic from a non-sticky connection?
Are non-sticky connections necessary when using asymmetric routing?
How are TCP sessions managed when using non-sticky connections?
What is "Flush and Ack" regarding a non-sticky connection?
In a ClusterXL failover why would a member be in the "Active Attention" state?
When Does a Failover Occur?
In ClusterXL, what is a critical device?
What happens if a member in a ClusterXL uninstalls the policies?
What Happens When a Security Gateway Recovers in a Load Sharing configuration, what are the configuration options?
How a Recovered Cluster Member obtains the Security Policy?
What are the four ClusterXL Modes?
Load Sharing Multicast Mode?
Is it necessary to enable synchronization in a Load Sharing Multicast (ClusterXL) configuration?
What is the purpose of ARP packages sent by members of a ClusterXL in Load Sharing Multicast Mode?
When there is a failover in a Load Sharing Multicast (ClusterXL) configuration member, is it necessary for the active member to issue GARP packages?
What are the functions of the "Pivot" member in a Load Sharing Unicast (ClusterXL) configuration?
How is the "Pivot" member chosen in a Load Sharing Unicast (ClusterXL) configuration?
What happens when there is a failover of the "Pivot" member in a Load Sharing Unicast (ClusterXL) configuration?
What MAC address is associated with the Cluster IP in a New High Availability Mode (ClusterXL) configuration?
A member who is in Standby status begins to have problems, can this member participate in the active member election if a Cluster failover occurs in a New High Availability Mode (ClusterXL) configuration?
When a Cluster failover occurs in a New High Availability Mode (ClusterXL) configuration, which layer 2 packets does the new active member send?
What are the possible states of a ClusterXL member?
ClusterXL Active attention state?
ClusterXL Down state?
ClusterXL Ready state?
In which state does a ClusterXL member check for the existence of another active member in high availability mode or the existence of a pivot in load sharing unicast mode?
ClusterXL Initializing state?
What is the next state in ClusterXL? ClusterXL inactive or member is down?
What happens if a member in a ClusterXL needs to change status?
What is a Problem Notification in ClusterXL?
What are the built-in critical devices in a ClusterXL?
For the built-in critical device "The cluster interfaces on the cluster members", which are the interfaces that the mechanisms of ClusterXL check?
For the built-in critical device "The cluster interfaces on the cluster members", when is a failover generated taking into account the minimum number of functional interfaces?
For the built-in critical device "The cluster interfaces on the cluster members", which interfaces are taken into account for the minimum calculation of required functional interfaces?
For the built-in critical device "The cluster interfaces on the cluster members", what do the DOWN and READ states mean for an interface?
What are the initial states available when registering a critical device defined by the administrator?
What does it mean to register the status of a Critical Device to the ClusterXL, and what are the possible states?
What happens if a critical device defined by the user and with a timeout of 10 seconds at the time of registration, does not report its status after 10 seconds?
What is the "ClusterXL_monitor_ips" script located in $FWDIR/bin used for?
What is the "ClusterXL_monitor_process" script located in $FWDIR/bin used for?
What is the CCP mode for HA New and Load Sharing Unicast Modes?
What happens when there is a failover in HA mode or Load Sharing unicast mode (not multicast)?
What is the VMAC mode used for in HA mode or Load Sharing unicast mode (not multicast)?
What MAC address is used for local connections and sync connections when using VMAC Mode?
On what platform is VMAC Mode supported?
What is Forwarding Layer?
When a member forwards a packet to another member through the forwarding layer once it has been inspected locally, what special item informs the peer member that the packet has already been inspected?
How and why does a member forward a package to a peer member through the forwarding layer?
Packets originated by cluster members can pose problems in the following situations: - New High Availability mode. The connection is opened from the stand-by member. All packets from the external host are handled by the active member, instead of the original gateway. - Load Sharing mode. The decision function has selected another member to handle this connection. This can happen since packets directed at a cluster IP are distributed among cluster members as with any other connection. What is the solution to ensure that a packet originated by a security gateway is forwarded to that gateway?
