Symantec 10521146 - Network Security 7120 Administration Manual page 294

294 Advanced configuration
Establishing high availability failover
restart also fail, then Symantec Network Security shifts or fails over to the
standby node.
Watchdog processes are advanced configurations that employ advanced
parameters. Make sure that sufficient RAM exists on the system. When
deploying failover groups, keep in mind that the failover system is designed to
work best for nodes that have a fast, reliable network interconnection between
their administration interfaces. An example configuration would be two nodes in
close proximity, connected through the Ethernet.
Note: Do not confuse failover with fail-open, which is the state that permits
(fail-open) or blocks (fail-closed) traffic from flowing through a sensor that is
placed in-line with a firewall.
Note: SuperUsers can configure watchdog processes; Administrators,
StandardUsers, and RestrictedUsers cannot. See
page 319 for more about permissions.
Set up and enable watchdog processes by configuring the following parameters:
Setting Enable Watchdog Process
■
Setting Watchdog Process Stop Window
■
Setting Watchdog Process Maximum Resets
■
Setting Watchdog Process Restart Only
■
Setting Watchdog Process Email
■
Setting Enable Watchdog Process
Enable Watchdog Process serves as the on/off switch for the watchdog process.
You must set the other parameters to configure this process.
The default is false.
To configure node parameters
1 Click Configuration > Node > Network Security Parameters.
2 In Select Node, choose the node from the pull-down list, and click OK.
3 In the left pane, click the parameter that you want to configure.
4 In the lower right pane, click True to enable this parameter.
5 Click Apply.
"User groups reference" on