Đang chuẩn bị liên kết để tải về tài liệu:
check point ng vpn 1 firewall 1 advanced configuration and troubleshooting phần 5

ví dụ, việc triển khai SecurePlatform Hiệu suất gói và cung cấp cho nhiều hơn tăng hiệu suất cho mật mã hơn là sử dụng thẻ tăng tốc trên Windows. Hình 5.2 Mã hóa giao thông nội bộ Chuyển đổi không mã hóa giao thông đi qua đoạn mạng an toàn giao thông được mã hóa thông qua Workstation mạng chuyển mạch không an toàn phân khúc | High Availability and Clustering Chapter 6 225 Figure 6.39 we can see that member fw2 is active. If we right-click fw2 and select Stop Member we will force fw1 to switch to active.This assumes that fw1 or another cluster member is available. Be sure to check this status before stopping the current active member fw2 Active Figure 6.39 Smartview Status GUI Showing ClusterXL HA New Mode with Member Take note of the Running Mode field which states whether the member is active or not. Note Note that if a member has been disabled using Stop member the ClusterXL Details pane might still show the member as active. This is because we have lost contact with the ClusterXL module on that member and the GUI is still displaying the last known status. It is worth checking the last updated time for the ClusterXL status and forcing an update right-click ClusterXL and select Update . A stopped member can be revived by right-clicking the member name and selecting Start Member. Note that it will stay in Standby mode irrespective of its priority if Maintain Current Active gateway is set in the cluster object. Test 3 FTP Session Through the Cluster When an Interface Fails As with all cluster solutions the best tests are those simulating real-world failure. Physically damaging cluster members is probably the most challenging test but probably not a popular option either. A more acceptable test is disconnecting a network cable from the current master member during a file download through the cluster. www.syngress.com 226 Chapter 6 High Availability and Clustering In our example we initiate a command-line FTP session from the internal host on 192.168.1.200 to 192.168.12.133 refer to Figure 6.12 .The default gateway of host 192.168.1.200 will be the cluster VIP address for that subnet 192.168.1.130 .The default gateway for 192.168.12.133 will be VIP 192.168.12.130. We will use the ftp hash command in order to display the blocks downloaded so we can see the download s progress. A large file