https://community.checkpoint.com/t5/Firewall-and-Security-Management/Two-ISP-using-PBR-o-not/m-p/116692#M16463 <P>You’ll probably have to configure ISP Redundancy for this to work seamlessly due to the need for NAT.<BR />It should support the configuration you describe.<BR />You can use ISP2 as the Remote Access endpoint if you wish, just configure the relevant IP for Link Selection.</P> Fri, 23 Apr 2021 04:59:12 GMT PhoneBoy 2021-04-23T04:59:12Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Two-ISP-using-PBR-o-not/m-p/116689#M16462 <P>I would like to make the following configuration:</P><P>I have two internet services, (ISP1 and ISP2). I want all the subnets to go through ISP1 and only one subnet through ISP2. When ISP1 is down all traffic send it to ISP2, when ISP1 is going to be up the traffic will return through ISP1. Likewise, if the ISP2 is down, the subnet that goes out through that link will pass the traffic to the ISP1 and when ISP2 is up again, the subnet will go out through SIP2.</P><P>&nbsp;</P><P>Do I have to configure any Redundant SIP? (HA or Load Balancing)<BR />Should the default route be added to ISP1 only? or also to ISP2?<BR />Would you use PBR?</P><P>Is it possible to configure ISP2 as a VPN client service?</P> Fri, 23 Apr 2021 04:26:10 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Two-ISP-using-PBR-o-not/m-p/116689#M16462 Raymundo 2021-04-23T04:26:10Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Two-ISP-using-PBR-o-not/m-p/116692#M16463 <P>You’ll probably have to configure ISP Redundancy for this to work seamlessly due to the need for NAT.<BR />It should support the configuration you describe.<BR />You can use ISP2 as the Remote Access endpoint if you wish, just configure the relevant IP for Link Selection.</P> Fri, 23 Apr 2021 04:59:12 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Two-ISP-using-PBR-o-not/m-p/116692#M16463 PhoneBoy 2021-04-23T04:59:12Z