Hi ..

Would you mind elaborating a bit more on your answer ? statefull failover actually replicates stefull information such TCP/UDP connections, NAT .. etc so that if the active unit fails then the standy unit takes over without the requirement for re-stablishing new sessions .. are we in the same track here ..?

Regular and Stateful Failover

The security appliance supports two types of failover, regular and stateful. This section includes the following topics:

•Regular Failover

•Stateful Failover

Regular Failover

When a failover occurs, all active connections are dropped. Clients need to reestablish connections when the new active unit takes over.

Stateful Failover

When Stateful Failover is enabled, the active unit continually passes per-connection state information to the standby unit. After a failover occurs, the same connection information is available at the new active unit. Supported end-user applications are not required to reconnect to keep the same communication session.

The state information passed to the standby unit includes the following:

•NAT translation table.

•TCP connection states.

•UDP connection states.

•The ARP table.

•The Layer 2 bridge table (when running in transparent firewall mode).

•The HTTP connection states (if HTTP replication is enabled).

•The ISAKMP and IPSec SA table.

•GTP PDP connection database.

You are right, Fernando - state information is passed (except http). Try "sh conn" to see connections.

Hi, Thank you for your feedback.

I am using the stateful firewall failover.

If i issue the "show local-host" command in the stand-by Unit i am not seeing any information.

It is blank. I am surprised how it happening.

Hi,

any clues... how it behaves

R.B.Kumar