Intermittent VS failover when both MHOs have the interface link state set to Down

Product: Maestro HyperScale Firewall
Version: R81.20, R82, R82.10
OS: Gaia
Platform: Maestro Orchestrator
Last Modified: 2026-07-23

Symptoms

• Virtual System (VS) failover occurs when both Maestro Hyperscale Orchestrators (MHOs) have the interface link state set to Down.
• Failover is intermittent and occurs during some switch reboot attempts (for example, 1 out of 4 attempts).
• Both chassis lose port state at nearly the same time, causing a timing sensitivity condition.
• During the event, Border Gateway Protocol (BGP) connections to all directly connected switches are lost, resulting in approximately 40 seconds of network outage.
• No high Central Processing Unit (CPU) usage is observed on the firewalls during the event.

Cause

A timing sensitivity condition exists between the two Quantum Maestro sites (chassis) during a peer switch reboot.
If the Active site detects the port-down state even slightly before the Standby site, the system grading changes and triggers an unintended failover. Although both sites lose port state almost simultaneously, the failover decision is sensitive to very small timing differences.
The issue is intermittent because the exact timing of port state detection varies slightly between events.

Solution

This problem was fixed. The fix is included in:

• Jumbo Hotfix Accumulator for R82.10 starting from Take 36
• Jumbo Hotfix Accumulator for R82 starting from Take 118
• Jumbo Hotfix Accumulator for R81.20 starting from Take 158

If you choose not to upgrade, Check Point can supply a Hotfix. Contact Check Point Support to get a Hotfix for this issue.

A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.

For faster resolution and verification, please collect CPinfo files from the Security Management Server and Security Gateways involved in the case.

Hotfix installation instructions:

Refer to sk168597 - How to install a Hotfix.

NOTE

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

Article Properties

Access Level: General
Status: Approved by TAC
Date Created: 2026-03-23
Last Modified: 2026-07-23