topic Re: What is the alternative way redundancy dual ISP for R80.40 using VSX mode in Firewall and Security Management

What is the alternative way redundancy dual ISP for R80.40 using VSX mode

nicktran — Thu, 11 Feb 2021 02:21:52 GMT

Hi,

I using R80.40 (2 Secure Gateway Cluster XL, 1 Management Server), running on VSX mode. I checked VSX mode doesn't support the ISP redundancy feature (sk79700). However, we really need this function of our system. I would like to find an alternative solution for it. Is it the PBR can resolve this problem? Does anybody have an idea for it?

This is the link VSX supported features (checkpoint.com)

Re: What is the alternative way redundancy dual ISP for R80.40 using VSX mode

PhoneBoy — Thu, 11 Feb 2021 06:37:18 GMT

ISP Redundancy does not support VSX.
PBR is your only real option here.

Re: What is the alternative way redundancy dual ISP for R80.40 using VSX mode

nicktran — Thu, 11 Feb 2021 10:28:19 GMT

I don't understand how to use PBR because VSX supports 1 static default route only. Do you have any examples?

Re: What is the alternative way redundancy dual ISP for R80.40 using VSX mode

PhoneBoy — Thu, 11 Feb 2021 17:41:13 GMT

I don't have any examples for VSX specifically, but I assume it's similar to what's in the documentation.
See: https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_Gaia_Advanced_Routing_AdminGuide/Topics-GARG/Policy-Based-Routing-Configuring-in-Gaia-Clish.htm?tocpath=Policy%20Based%20Routing%7C_____2