topic S2S and C2S VPN tunnels on 28000 FW in Firewall and Security Management

S2S and C2S VPN tunnels on 28000 FW

AlvinCheung — Tue, 23 Nov 2021 07:36:43 GMT

Hello everyone,

Please kindly advise how many site-to-site and client-to-site VPN tunnels are supported on the Check Point 28000 firewall.

Thanks a lot!

Alvin

Re: S2S and C2S VPN tunnels on 28000 FW

Peter_Lyndley — Tue, 23 Nov 2021 09:31:04 GMT

more than you could ever configure probably 😉

Re: S2S and C2S VPN tunnels on 28000 FW

Timothy_Hall — Fri, 26 Nov 2021 16:17:14 GMT

Generally the only limitation for number of VPN tunnels is available memory, however on the Optimizations screen of the gateway/cluster object there is a soft limit of 1,000 concurrent IKE negotiations and 10,000 total tunnels that can be potentially increased. I've never needed to do so, and if you are bumping into either of these limits there is something seriously wrong with your VPN configuration, probably involving VPN Tunnel Sharing being set to "pair of hosts" and hundreds or even thousands of different hosts trying to communicate with each other through a VPN.

Re: S2S and C2S VPN tunnels on 28000 FW

the_rock — Fri, 26 Nov 2021 16:31:02 GMT

lol...thats probably true 🙂

Re: S2S and C2S VPN tunnels on 28000 FW

the_rock — Fri, 26 Nov 2021 16:31:47 GMT

Check out below:

https://community.checkpoint.com/t5/Security-Gateways/VPN-Tunnels-Capacity/m-p/6914

Personally, if you really need this info, you may wish to contact your local Sales rep.