Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We have our CSS load balancers behind our firewalls in a DMZ and when the firewall fails over the physical interface changes the MAC address to the new address of the now active firewall but the VIP's do not and all traffic to those VIPs are broken. ...
The firewalls are Checkpoint running in HA mode. When the firewalls failover the MAC address changes to the interface of the now active firewall's interface. The firewall's IP stays the same. The CSS does not failover. The CSS physcial interface see'...