User's Manual Part 1

Configuring High Availability
122 Check Point Safe@Office User Guide
priority by a user-specified amount, if its Internet connection goes down. If the
Active Gateway's priority drops below another gateway's priority, then the other
gateway becomes the Active Gateway.
Note: You can force a fail-over to a passive Safe@Office appliance. You may want
to do this in order to verify that HA is working properly, or if the active Safe@Office
appliance needs repairs. To force a fail-over, switch off the primary box or
disconnect it from the LAN network.
The Safe@Office appliance supports configuring multiple HA clusters on the same
network segment. To this end, each cluster must be assigned a unique ID number.
When HA is configured, you can specify that only the Active Gateway in the
cluster should connect to the Internet. This is called WAN HA, and it is useful in
the following situations:
• Your Internet subscription cost is based is on connection time, and
therefore having the Passive appliance needlessly connected to the Internet
costs you money.
• You want multiple appliances to share the same static IP address without
creating an IP address conflict.
WAN HA avoids an IP address change, and thereby ensures virtually uninterrupted
access from the Internet to internal servers at your network.
Before configuring HA, the following requirements must be met: