Mark answered this earlier. As he stated, policy is installed for the gateway and all the interfaces you have defined, the interface you have defined under the general props is the interface used to get the policy installed on the gateway, and it does not matter if this is an HA interface of not, any interface you have defined can have the policy installed via this interface provided the manager can reach it, and as Hugo stated, you want to avoid pushing a policy to one HA member through the other HA member.
-GS ________________________________ From: Peter Addy <wavema...@yahoo.com> To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Sent: Wed, October 20, 2010 8:29:28 AM Subject: Re: [FW-1] policy installation on interfaces hi does anyone have any idea on this question? cheers --- On Wed, 20/10/10, Peter Addy <wavema...@yahoo.com> wrote: From: Peter Addy <wavema...@yahoo.com> Subject: [FW-1] policy installation on interfaces To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Date: Wednesday, 20 October, 2010, 11:15 Hi, This is probably an easy one to answer, when a policy installation ocuurs, does the policy install on all interfaces, does it install on interfaces that do not have a vrrp address, or does it simply push a policy to all of the interfaces on the cluster topology, regardless of cluster addreses or not? thanks ================================================= To set vacation, Out-Of-Office, or away messages, send an email to lists...@amadeus.us.checkpoint.com in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email fw-1-ow...@ts.checkpoint.com ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to lists...@amadeus.us.checkpoint.com in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email fw-1-ow...@ts.checkpoint.com ================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to lists...@amadeus.us.checkpoint.com in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email fw-1-ow...@ts.checkpoint.com ================================================= Scanned by Check Point Total Security Gateway.
