topic Re: IPSec VPN with Zscaler in Firewall and Security Management

IPSec VPN with Zscaler

Herold — Mon, 15 Jun 2020 14:25:06 GMT

Hi,

Is there any integration guide to implement IPSec VPN with Zscaler ? I'm trying to establish a IPSec Tunnel to forward all port 80 and 443 traffic from a Checkpoint Firewall to Zscaler. Please advise.

Thanks,

Re: IPSec VPN with Zscaler

PhoneBoy — Mon, 15 Jun 2020 16:28:07 GMT

Why would you do that when we do all the same functionality or better on the gateway itself using the various NGTX blades? 🙂

Personally, I haven't seen an integration guide myself.
Historically, they've wanted to use GRE, which is something we don't support.
Here's what Zscaler has to say: https://help.zscaler.com/zia/configuring-ipsec-vpn-tunnel
Part of what they say here isn't true because:
1. From R80.30, we can support MEP with DPD with third party peers.
2. What is sent down the tunnel is "all ports and protocols."

What is true is that it would require some complex configuration to send only 80/443 traffic down the VPN tunnel.
My guess is that involves NON_VPN_TRAFFIC_RULES.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk25675

And I guess you have to disable NAT-T support, as their document says.

Re: IPSec VPN with Zscaler

vijayakumar_M — Fri, 18 Dec 2020 13:47:51 GMT

i too have the same requirement can you help us.

Re: IPSec VPN with Zscaler

jrinns — Tue, 26 Jan 2021 10:47:11 GMT

Hi did anyone get the IPSEC tunnels created to Zscaler?