The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
No traffic is passed through ClusterXL in High Availability mode when proxy is enabled
R75.40, R75.40VS, R75.45, R75.46, R76
Platform / Model
Show more details
Show less details
No traffic is passed through ClusterXL in High Availability mode when proxy is enabled.
If ClusterXL in High Availability mode is used as Proxy in Non Transparent mode, then NAT kernel table 'fwx_alloc' on the Standby cluster member has significantly more entries than on the Active cluster member (ports leak).
"NAT hide failure - no available port for hide NAT" logs in SmartView Tracker.
Ports that are allocated by the proxy, and should not be synchronized to the Standby member, are being synchronized.