High Availability with Load Balancing

With the growth of eBusiness over the Internet, the VPN-1/FireWall-1 gateway to the Internet has become a mission-critical link companies cannot afford to lose, even temporarily. Check Point leads the industry with an advanced framework for high availability that allows gateways to share information on active connections. Should one gateway or network connection fail, the other gateway(s) can seamlessly take over existing connections without impacting users. Even IPSEC/IKE connections can be maintained.

As the mission-critical Internet link in an enterprise grows, balancing the traffic between multiple gateways becomes imperative. Check Point's OPSEC HA/LB Partners provide cluster support for balancing the traffic load between multiple gateways with failover capabilities should one of the gateways go down. This cluster of gateways allow the enterprise to expand with its growing Internet traffic demands while maintaining the reliability of a HA solution.

Check Point's OPSEC HA/LB allows third party vendors to take advantage of the VPN-1/FireWall-1 state table synchronization feature. State table synchronization allows each VPN-1/FireWall-1 in a high availability cluster to record connection data and synchronize its connection data with the others. It also allows an OPSEC certified HA/LB product to seamlessly failover a VPN-1/FireWall-1 connection from a failed Gateway to an available Gateway in a HA cluster.