156-215.80 · Question #353
John is using Management HA. Which Smartcenter should be connected to for making changes?
The correct answer is B. active Smartcenter. In Check Point Management HA, all policy and configuration changes must be made on the active SmartCenter, which then replicates updates to the standby node.
Question
John is using Management HA. Which Smartcenter should be connected to for making changes?
Options
- Asecondary Smartcenter
- Bactive Smartcenter
- Cconnect virtual IP of Smartcenter HA
- Dprimary Smartcenter
How the community answered
(43 responses)- A5% (2)
- B86% (37)
- C2% (1)
- D7% (3)
Why each option
In Check Point Management HA, all policy and configuration changes must be made on the active SmartCenter, which then replicates updates to the standby node.
The secondary SmartCenter is in a read-only standby state and does not accept configuration changes.
The active SmartCenter is the only authoritative, writable node in a Management HA pair. All edits, policy installs, and object changes must be performed while connected to the active SmartCenter, which then synchronizes the changes to the standby secondary automatically.
Check Point Management HA does not use a virtual IP for SmartCenter access the way ClusterXL uses a virtual IP for gateway high availability - administrators connect directly to the active node.
The label 'primary' is misleading because after a failover the original secondary becomes active - the correct operational term is 'active', not 'primary'.
Concept tested: Check Point Management HA active node for changes
Source: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Topics-SMAG/Management-High-Availability.htm
Topics
Community Discussion
No community discussion yet for this question.