topic Internet access via VPN to 3rd party firewall in Firewall and Security Management

Internet access via VPN to 3rd party firewall

Christian_Koehl — Mon, 18 Oct 2021 12:49:21 GMT

Dear Checkmates,

I need to build a VPN between an internat Check Point Firewall R80.30 and a 3rd party firewall located on the internet edge.

This 3rd party firewall is the main internet access point.

Any hints, especially regarding the Enc-Dom and "route-based VPN vs policy based VPN".

Thanks alot and best regards,

Christian

Re: Internet access via VPN to 3rd party firewall

PhoneBoy — Wed, 20 Oct 2021 15:22:33 GMT

Looking at this diagram, it's not clear exactly what the purpose of this VPN is.
Exactly what traffic are you trying to encrypt?

Re: Internet access via VPN to 3rd party firewall

Christian_Koehl — Wed, 20 Oct 2021 15:33:59 GMT

It is an internal network area for external users and there system (systems not owned by the customer) -- like a "guest network". The guests should get "direct" internet access and there communication has to be tunneled through the customer network.

Re: Internet access via VPN to 3rd party firewall

PhoneBoy — Wed, 20 Oct 2021 17:43:26 GMT

You probably need to use a route-based VPN since you're basically using an encryption domain of "everything" in this case.
Again, exactly how this would be set up depends on the third party endpoint in question.