topic Re: Secure Remote IP is constantly changing. in Cloud Firewall

Secure Remote IP is constantly changing.

Murat_TURAN — Mon, 05 Aug 2024 08:17:09 GMT

The IP address that I defined as 88.***.***.***.** when I defined it for the first time and made a VPN connection, changes to 10.10.1.254 when I disconnect and reconnect. This is the internal IP address of my firewall. Where could this be coming from? It started happening a short while ago.

Re: Secure Remote IP is constantly changing.

AkosBakos — Mon, 05 Aug 2024 08:41:27 GMT

Hi @Murat_TURAN

Plese check this article, before you start deeper debug:

https://community.checkpoint.com/t5/Remote-Access-VPN/Unable-to-connect-Remote-Access-VPN-after-disconnect/m-p/222222#M10925

Long story short: After connect, de MAIN IP has been overwritten to that IP which is selected under "link selection"

Akos

Re: Secure Remote IP is constantly changing.

Murat_TURAN — Mon, 05 Aug 2024 09:03:07 GMT

I've recently added a new ISP, ISP redundancy, and I think there's been some confusion. I didn't think it would have this effect, because this system has been running for years. Thank you so much.

Re: Secure Remote IP is constantly changing.

AkosBakos — Mon, 05 Aug 2024 09:04:59 GMT

Hi @Murat_TURAN

What did you choose unde VPN Link selection?

Re: Secure Remote IP is constantly changing.

AkosBakos — Mon, 05 Aug 2024 09:16:13 GMT

hi @Murat_TURAN

I found this:

Configuring ISP Redundancy for VPN with a Check Point peer

https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_ClusterXL_AdminGuide/Content/Topics-CXLG/ISP-Redundancy-and-VPN.htm?tocpath=Advanced%20Features%20and%20Procedures%7CISP%20Redundancy%20on%20a%20Cluster%7C_____2

Re: Secure Remote IP is constantly changing.

rrbranco — Mon, 05 Aug 2024 09:18:01 GMT

Take a look at this

https://support.checkpoint.com/results/sk/sk75221

Remote Access TTM Configuration

Pay attention to the whole article and read carefully the connectivity section like: automatic_mep_topology , ips_of_gws_in_mep , enable_gw_resolving , enable_secondary_connect (among others) for instance

Best regards,

Re: Secure Remote IP is constantly changing.

Murat_TURAN — Mon, 05 Aug 2024 09:29:25 GMT

I choose my primary public IP address. 30-40 users are already using this IP address.

Re: Secure Remote IP is constantly changing.

rrbranco — Mon, 05 Aug 2024 09:34:38 GMT

I would pay attention to the IPSEC site to site VPN configurations that could be on screens and menus possibly slightly different to the Remote Access VPN configuration.

Re: Secure Remote IP is constantly changing.

Murat_TURAN — Mon, 05 Aug 2024 09:37:28 GMT

We haven't side to side VPN. Thank you.