https://community.checkpoint.com/t5/Firewall-and-Security-Management/Policy-Based-VPN-Route-Redistribution/m-p/68068#M12107 <P>Hi all,</P><P>&nbsp;</P><P>Is it possible to redistribution routes into OSPF or BGP when using policy based VPNs or is my only option to use route based VPNs? Since there is no static route or next hop when using with policy based VPNs, I'm guessing that routed based is the only way to go, however, my experience with Checkpoint is limited so I wanted additional insight</P><P>If route based VPNs is the way to go, all of our VPNs are current policy based. Is there any issues with using policy based VPNs with route based VPNs on the same appliance?&nbsp;</P> Thu, 21 Nov 2019 23:58:47 GMT lbcadenco10 2019-11-21T23:58:47Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Policy-Based-VPN-Route-Redistribution/m-p/68068#M12107 <P>Hi all,</P><P>&nbsp;</P><P>Is it possible to redistribution routes into OSPF or BGP when using policy based VPNs or is my only option to use route based VPNs? Since there is no static route or next hop when using with policy based VPNs, I'm guessing that routed based is the only way to go, however, my experience with Checkpoint is limited so I wanted additional insight</P><P>If route based VPNs is the way to go, all of our VPNs are current policy based. Is there any issues with using policy based VPNs with route based VPNs on the same appliance?&nbsp;</P> Thu, 21 Nov 2019 23:58:47 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Policy-Based-VPN-Route-Redistribution/m-p/68068#M12107 lbcadenco10 2019-11-21T23:58:47Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Policy-Based-VPN-Route-Redistribution/m-p/68183#M12108 Generally mixing Domain and Route-based VPNS on the same gateway is a bad idea. Sat, 23 Nov 2019 04:12:58 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Policy-Based-VPN-Route-Redistribution/m-p/68183#M12108 PhoneBoy 2019-11-23T04:12:58Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Policy-Based-VPN-Route-Redistribution/m-p/68198#M12109 <P>On your local Check Point add a route for the remote encryption domain with next hop your ISP router</P><P>The firewall will never route it to the ISP since the vpn daemon picks it up first and forwards it to the domain based VPN</P> Sat, 23 Nov 2019 12:43:35 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Policy-Based-VPN-Route-Redistribution/m-p/68198#M12109 JanVC 2019-11-23T12:43:35Z