https://community.checkpoint.com/t5/Firewall-and-Security-Management/Simple-Question-regarding-VPN-from-on-premises-Cluster-to-Azure/m-p/127809#M18572 <P>Dear CheckMates,</P><P>we are currently deploying our first and only virtual CheckPoint Appliance based on Azure. The main configuration was sometimes already confusing or completely new, due the focus on hardware-based Appliance with direct access to the internet in the past. Currently the Virtual Appliance (80.30) is connected and managed via our Cluster (80.20) based on two 4800 Blades.</P><P><STRONG>Now the problem for us:</STRONG></P><P>The virtual Appliance has an Alias Interface to adress public traffic. How can we use this public IP oder Alias Interface in the Setup of an VPN Tunnel between the CheckPoint Cluster on-premises and the Azure virtual CheckPoint Appliance? Which setting is the correct one in the menu für "IPsec VPN"?</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Bildschirmfoto 2021-08-24 um 11.51.38.png" style="width: 426px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/13493i2216A9729B7896A7/image-size/large?v=v2&amp;px=999" role="button" title="Bildschirmfoto 2021-08-24 um 11.51.38.png" alt="Bildschirmfoto 2021-08-24 um 11.51.38.png" /></span></P><P>An error indicates, that "Main adress" is the wrong setting, because the Main adress of the object is the public IP which is - absolutly confirmed - not part part of the topology table.</P><P>&nbsp;</P><P>Any advise or help is appriciated.&nbsp;<span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Tue, 24 Aug 2021 09:55:56 GMT Tom_Tailor 2021-08-24T09:55:56Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Simple-Question-regarding-VPN-from-on-premises-Cluster-to-Azure/m-p/127809#M18572 <P>Dear CheckMates,</P><P>we are currently deploying our first and only virtual CheckPoint Appliance based on Azure. The main configuration was sometimes already confusing or completely new, due the focus on hardware-based Appliance with direct access to the internet in the past. Currently the Virtual Appliance (80.30) is connected and managed via our Cluster (80.20) based on two 4800 Blades.</P><P><STRONG>Now the problem for us:</STRONG></P><P>The virtual Appliance has an Alias Interface to adress public traffic. How can we use this public IP oder Alias Interface in the Setup of an VPN Tunnel between the CheckPoint Cluster on-premises and the Azure virtual CheckPoint Appliance? Which setting is the correct one in the menu für "IPsec VPN"?</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Bildschirmfoto 2021-08-24 um 11.51.38.png" style="width: 426px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/13493i2216A9729B7896A7/image-size/large?v=v2&amp;px=999" role="button" title="Bildschirmfoto 2021-08-24 um 11.51.38.png" alt="Bildschirmfoto 2021-08-24 um 11.51.38.png" /></span></P><P>An error indicates, that "Main adress" is the wrong setting, because the Main adress of the object is the public IP which is - absolutly confirmed - not part part of the topology table.</P><P>&nbsp;</P><P>Any advise or help is appriciated.&nbsp;<span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Tue, 24 Aug 2021 09:55:56 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Simple-Question-regarding-VPN-from-on-premises-Cluster-to-Azure/m-p/127809#M18572 Tom_Tailor 2021-08-24T09:55:56Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Simple-Question-regarding-VPN-from-on-premises-Cluster-to-Azure/m-p/127820#M18574 <P>Please look into&nbsp;sk109360</P> Tue, 24 Aug 2021 11:22:00 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Simple-Question-regarding-VPN-from-on-premises-Cluster-to-Azure/m-p/127820#M18574 _Val_ 2021-08-24T11:22:00Z