| 1. Use SmartView Tracker to identify Cluster specific error messages. | |
| 2. Make sure all traffic is routed to the VIP and not to any physical addressess. | |
| 3. When encountering status problems (false active/down status) make sure 'cpha' module begins with the 'cphaprob stat' command. | |
| 4. In ClusterXL HA/LS, verify that CCP packets (UDP 8116) are passing correctly between the cluster members. | |
| 5. For Nokia HA Clustering solution, verify VRRP are passing correctly between the cluster members. | |
| 6. To check each of the cluster member's status apply the 'cphaprob list' command on it. | |
| 7. In Load Sharing modes (ClusterXL / third party), try disabling 'Non sticky' connections. | |
| 8. In ClusterXL, when interfaces are flapping, make sure you have included the disconnected interfaces into the discntd.if file on both members (See ClusterXL guide) | |
| 9. In ClusterXL when interfaces are flapping, try switching between broadcast CCP and multicast CCP. | |
| 10.Make sure you are using the latest HFA available for the specific version that you have. | |
| 11.Check Point does not recommend having more than one cluster per VLAN. if you must, please refer to sk25977, sk18114. | |
| 12.When having VPN problems, make sure that IKE negotiation is between the VIP and the peer. | |
| 13.In case of failovers during policy installation enable the freeze machanism - refer to sk25971. |