Check Point HARMONY R81 - Management High Availability; Configuring a Secondary Server

Management High Availability
R81 Harmony Endpoint Server Administration Guide|170
Management High Availability
High Availability is redundancy and database backup for management servers. Synchronized
servers have the same policies, rules, user definitions, network objects, and system
configuration settings. The first management server installed is the primary. If the primary
Security Management Server fails, or is off line for maintenance, the secondary server takes
over.
When you use Check Point Endpoint Security, the Endpoint Security Management Server is
fully integrated with the Network Security Management Server on the same computer. This
means that the Security Management High Availability solution supplies backup and
redundancy for the Network Security Management Server and the Endpoint Security
Management Server databases.
Only one Secondary server is supported with Endpoint Security.
To learn how to configure and manage a High Availability environment, see "Management
High Availability" in the R81 Security Management Administration Guide .
Information that is different for environments with Endpoint Security is included in this guide.
Environments that include Endpoint Security require some additional steps for:
n
Configuring a secondary server
n
Failover
n
Synchronization of MSI files and drivers
Configuring a Secondary Server
To add a secondary server for an Endpoint Security environment, you must follow the workflow
defined here. You must create communication between the servers and install the database
BEFORE you enable Endpoint Security. After the first database installation and
synchronization are completed, you enable Endpoint Security with the Endpoint Policy
Management component, and then install the database again.
To add a secondary server and establish communication between the servers:
1. Install a new Security Management Server.
2. In SmartConsole, connect to the primary server.
3. Create a network object for the secondary server: In the Gateways & Servers tab, click
the New icon and select Network Objects > Gateways and Servers > Check Point
Host.