Hello Security Team,

I have a question on DSM Failover/FailBack.

I saw in one of the "GDE Installation/Registration" video that there is no option to give Secondary DSM IP  while registration of the agent.
So in HA environment how does FailOver/FailBack take place. Does this happen automatically or this is a Manual process?

It would be great if someone can help with flow of Failover/Failback between DSM OR if you could share a document on same.

Thanks,
Vijay SIngh Jamwal



------------------------------
Vijay Singh Jamwal
------------------------------

Agent receives list of DSM from his primary DSM. So there is no need to define a list of DSM's on agent level manually

There is possibility to attach agent to any DSM as his primary one

------------------------------
Zbigniew (Zibi) Szmigiero
IBM
Warsaw
------------------------------

Hi Vijay,

Up to DSM v6.1, the HA is setup Primary-Failover and from v6.2+ HA is active-active.

The way VTE agent communication goes is it usually has the primary/preferable Node to connect to and for:
1) up to v6.1.: if Primary node goes down, the agents should be able to communicate with Failover node but you may need to convert it to Primary.
2) v6.2: if Node1 (former Primary) goes down, the agents should be able to communicate with Node2 and no changes should be required unless you wish to have the agents registered to Node2 and, in that case, you need to unregister/re-register them accordingly.

I hope that helps...

Thank you!
-Felipe

------------------------------
Felipe Boff
------------------------------

Thanks, Felipe
That helped



------------------------------
vijay jamwal
------------------------------

Original Message:
Sent: Thu August 20, 2020 11:36 AM
From: Felipe Boff
Subject: Guardium Encryption DSM Failover

Hi Vijay,

Up to DSM v6.1, the HA is setup Primary-Failover and from v6.2+ HA is active-active.

The way VTE agent communication goes is it usually has the primary/preferable Node to connect to and for:
1) up to v6.1.: if Primary node goes down, the agents should be able to communicate with Failover node but you may need to convert it to Primary.
2) v6.2: if Node1 (former Primary) goes down, the agents should be able to communicate with Node2 and no changes should be required unless you wish to have the agents registered to Node2 and, in that case, you need to unregister/re-register them accordingly.

I hope that helps...

Thank you!
-Felipe

------------------------------
Felipe Boff
------------------------------