Cluster has preemption enabled for Check Point

Vendor

Check Point

Description

Preemption is generally a bad idea in clustering, although sometimes it is the default setting. Indeni will alert if it's on.

Remediation Steps

It is generally best to have preemption disabled. Instead, once this device returns from a crash, you can conduct the failover manually.

How does this work?

By parsing $FWDIR/database/netobj_objects.C it is possible to retrieve the preempt setting for the device.

Why is this important?

By parsing $FWDIR/database/netobj_objects.C it is possible to retrieve the preempt setting for the device.

Without Indeni how would you find this?

An administrator can view the setting in Check Point SmartDashboard.


View Source Code