If a server is using manual synchronization, how often should the server be manually synchronized?

In a multi-domain environment, the Multi-Domain Servers work in active-active mode. All Multi-Domain Servers are active and synchronize each other.

Inhaltsverzeichnis Show

How Synchronization Works
Initial Synchronization
Periodic Synchronization
Manual Synchronization
Manually Synchronizing a Multi-Domain Server
Manually Synchronizing Domain Management Servers
Multi-Domain Server ICA Database Synchronization
How often should WSUS sync?
How do I manually sync WSUS?
How long is WSUS synchronization?
What is the minimum recommended amount of disk space that should be used for storing WSUS updates?

The Domains managed by the Multi-Domain Server

Dedicated Check Point server that runs Check Point software to host virtual Security Management Servers called Domain Management Servers. Synonym: Multi-Domain Security Management Server. Acronym: MDS. work in active-standby mode, where the Active Domain Server synchronizes all the standby Domain Servers.

The system automatically synchronizes periodically and when an administrator publishes changes to the configuration.

How Synchronization Works

During synchronization, the system performs these steps without user intervention:

On periodic synchronization:

The Active exports the delta data between the Active server and the Standby server to compressed files.
The compressed files are transferred to the Standby server.
The Standby Server replays the delta data from the uncompressed files.

On manual synchronization:

The Active Server exports the public data to compressed files.
The compressed files are transferred to the Standby Server.
The Standby server overrides the existing data with the uncompressed files.

The data that is transferred during synchronization includes:

Postgres database
Solr
ICA
Internal Certificate Authority. A component on Check Point Management Server that issues certificates for authentication. database
Configuration files
Domain licenses and contracts. Multi-Domain server licenses and contracts are not transferred.

Initial Synchronization

Initial synchronization occurs automatically when you create a secondary Multi-Domain Server, Multi-Domain Log Server

Dedicated Check Point server that runs Check Point software to store and process logs in a Multi-Domain Security Management environment. The Multi-Domain Log Server consists of Domain Log Servers that store and process logs from Security Gateways that are managed by the corresponding Domain Management Servers. Acronym: MDLS., or Domain Management Server

Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server.. The system generates a task to copy all databases and system information from the connected server to the new server.

Multi-Domain Server and Multi-Domain Log Server

Dedicated Check Point server that runs Check Point software to store and process logs. synchronization tasks show in the area, in the Multi-Domain Server SmartConsole

Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on.. Domain synchronization tasks show in the Domain SmartConsole.

Periodic Synchronization

Multi-Domain Servers synchronize with all other peers and Multi-Domain Log Servers. Periodic synchronization occurs automatically, and when an administrator publishes a session. Private (non-published) sessions do not synchronize.

Periodic synchronizations are incremental. Only database changes synchronize with peers. Active Domain Management Servers

Virtual Security Management Server that manages Security Gateways for one Domain, as part of a Multi-Domain Security Management environment. Acronym: DMS. synchronize to the standby Domain Management Servers.

Manual Synchronization

Manual synchronization is a full synchronization that overwrites all data on the peers. It disconnects all connected clients and overrides active sessions and running tasks.

When changes made in a session are published on the Active server (made public), the changes are synchronized to the Standby server. Unpublished, private sessions are not synchronized.

Best Practice - Use this option with caution, and only in cases of synchronization error. We recommend that you publish changes before initiating full sync.

For Domain Management Servers, you can only run a manual synchronization from the active Domain Management Server to the standby peers.

Manually Synchronizing a Multi-Domain Server

You can manually synchronize the connected Multi-Domain Server with a peer Multi-Domain Server.

To manually synchronize Multi-Domain Servers:

Click the area at the bottom of the SmartConsole window.
In the window, select a peer Multi-Domain Server to synchronize.
Click .

Synchronization starts immediately and the status shows in the window. The synchronization operation can take many minutes to complete.

Warning - Use manual synchronization with caution. This can overwrite all data on the peer Multi-Domain Server if they do not synchronize correctly.

Manually Synchronizing Domain Management Servers

You can manually synchronization a Standby Domain Management Server with the Active Domain Management Server on a different Multi-Domain Server.

To manually synchronize Domain Management Servers for a Domain:

Open SmartConsole for the active Domain Management Server.
Click > .
In the window, click > ..

Synchronization starts immediately and the status shows in the window. The synchronization operation can take many minutes to complete.

Multi-Domain Server ICA Database Synchronization

When you create a new secondary Multi-Domain Server, the Internal Certificate Authority (ICA) on the Primary Multi-Domain Server generates a certificate when you establish SIC

Secure Internal Communication. The Check Point proprietary mechanism with which Check Point computers that run Check Point software authenticate each other over SSL, for secure communication. This authentication is based on the certificates issued by the ICA on a Check Point Management Server. trust. The ICA can generate a certificate for a new administrator, if required by the authentication method. In a High Availability deployment with more than one Multi-Domain Server, the system synchronizes the ICA databases as necessary.

How often should WSUS sync?

How Often Should I Synchronize a WSUS Server?.

Synchronize your WSUS server once every 24 hours at an off-peak time..

If you are automatically approving Definition Updates, synchronize the server at least 2-3 times daily..

If possible, schedule an additional synchronization to coincide with Patch Tuesday..

How do I manually sync WSUS?

To manually synchronize the WSUS server In the WSUS Administration Console, click Options, and then click Synchronization Schedule. Click Synchronize manually, and then click OK.

How long is WSUS synchronization?

Note: You can always log into the replica server and manually run the sync after setting the approval status on the primary. Regarding group assignment, changes in the replica can take at least 24 hours to reflect in the primary server.