Check Point Alert of the Week: Sync redundancy should use a bond interface, not separate interfaces

This is a real life alert from Indeni

Description:

Sync redundancy should no longer be implemented using separate interfaces. This signature has been made possible with the help of Valeri Loukine.

Manual Remediation Steps:

Replace the separate sync interfaces with one bond interface. Read SK92804 and CCMA’s blog post on this.

How does this alert work?

indeni uses “cphaprob -a if” to determine the NICs used in clustering. If two NICs show up as the sync (secure) NICs, the alert is issued.