<p>Random traffic outage when a fail-over occurs in 3rd party Cluster in the following topology:

[Check Point machine on Gaia OS / SecurePlatform OS] --- [3rd party Cluster, e.g., Citrix NetScaler cluster]</p> Traffic capture on Check Point machine during the 3rd party Cluster fail-over shows the following chain of events:

<ol type="A">
<li>Traffic is sent from Check Point machine to 3rd party Cluster to the correct MAC Address</li>
<li>Fail-over occurs in 3rd party Cluster</li>
<li>3rd party Cluster sends Gratuitous ARP frames (either GARP Reply, or GARP Request) to announce a new MAC Address associated with 3rd party Cluster</li>
<li>Check Point machine keeps sending traffic to the previous MAC Address of 3rd party Cluster (the new announced MAC Address is "ignored")</li>
</ol> <p>Output of Clish command "<em>show arp dynamic all</em>", or Expert mode command "<em>arp -a</em>" after 3rd party Cluster fail-over shows  that the new announced MAC Address of 3rd party Cluster is not added to the ARP table.</p>…