cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
chvgms
Level 10
Report Inappropriate Content
Message 1 of 7

Managing MWG clusters

Hi,

I have 3 MWG clusters (2*4500C  and 1*4500B) running independent policies. I want to manage all 3 clusters so that policy is in sync at any time. What is the best way to manage them?

Thanks,

Sridhar

6 Replies
Troja
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 2 of 7

Re: Managing MWG clusters

Hi,

the easiest way is to build one policy which for your complete MWG environment. You can deplay a virtual machine just for managing the policy.

Afterwards you can remove the appliances from the central management and add them to the new management MWG.

The system settings are not changed.

It is also useful to make a backup of any cluster before changing the central management cluster.

Hope this helps,

Cheers

chvgms
Level 10
Report Inappropriate Content
Message 3 of 7

Re: Managing MWG clusters

my current requirement is to have 2 clusters at siteA to be in sync (policy) with each other. The other clsuter is at siteB. So inorder to manage all MWG clusters using VM, do i need an additonal license. Also to add the VM, do i use the VIP or the individual IP's? FYI, we have 3 clsuters configured in traditional proxy cluster.

Troja
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 4 of 7

Re: Managing MWG clusters

Hi,

no, you need no license, MWG is licensed by user.

1) Yes, you can configure mwg using to different HA clusters but the same policy on every mwg.

2) if you want to configure different policies for every HA Cluster (Site A uses a different policy as Site B) you have to separate it in the ruleset. In this case you can use e.g. the proxy system name.

Cheers

chvgms
Level 10
Report Inappropriate Content
Message 5 of 7

Re: Managing MWG clusters

thq, i can built a new VM with the same version as others MWG's and add them to the CM using the VIP for policy sync.  By doing this will i be retaining the individual settings/configuration of the boxes as well as the cluster configuration settings?

Troja
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 6 of 7

Re: Managing MWG clusters

Yes, this will remain the Appliance settings.

In a central Management anything under "Policy" and "Accounts" is synced.

Cheers

Re: Managing MWG clusters

Hi ,

Please see guide

and

Hope it will help you.

Thanks,

DK

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community