Configuring Watchdog Processes - Symantec 10521146 - Network Security 7120 Administration Manual

Configuring watchdog processes

If the active node fails for any reason, a standby node takes over recording
■
data.
If the original node comes back online, it resumes activity. There is no
■
automatic recovery or failback. When the original node resumes activity,
you must restart all nodes to reconnect.
If a node fails, the Network Security console automatically connects to the
■
standby node in the same failover group. You can configure the Network
Security console to display standby node information. The console
automatically connects to and pulls incidents and events from the standby
node.
New events automatically show up without reconfiguration, even though
■
events from previous incidents before the failover is dependent on whether
the masters were actually detecting traffic themselves, or acting as console
servers only.
There is no failback when the Network Security console is concerned. If the
■
original master comes back online, the Network Security console does not
automatically switch back.
Response actions such as TrackBack that augment the incident may not be
■
visible during a failover, as a result of storing the response events in the
local event database of a given node.
To view incidents from both active and standby nodes
1 On the Incidents tab, click Filters.
2
In Incident Filter Options, click Include Backup Nodes. If the network
contains multiple nodes specified in a watchdog group, the incidents from
all standby nodes are added to the incident table.
See "Selecting incident filters"
3 Click Apply.
Note: SuperUsers can preserve failover incidents; Administrators,
StandardUsers, and RestrictedUsers cannot. See
page 319 for more about permissions.
Symantec Network Security provides a set of parameters that you can use to
configure watchdog processes. Watchdog processes monitor each node closely,
and if a failure occurs on any node, Symantec Network Security makes a number
of attempts to reboot or restart the downed node. If the attempts to reboot or
Establishing high availability failover
on page 205.
"User groups reference"
Advanced configuration
on
293