topic Re: WireGuard in Firewall and Security Management

WireGuard

Wilson_Wiley — Tue, 03 Sep 2019 17:05:41 GMT

I was curious to find out if anyone knows if Check Point has looked into implementing WireGuard? It seems really promising and could be a huge benefit to customers with a lot of VPNs. From what I've read, there's a lot of advantages to WireGuard over traditional IPSec VPNs: reduced code attack surface, simpler setup, stronger algorithms, and faster connections.

https://www.wireguard.com/

https://arstechnica.com/gadgets/2018/08/wireguard-vpn-review-fast-connections-amaze-but-windows-support-needs-to-happen/

Thanks!

Re: WireGuard

PhoneBoy — Tue, 03 Sep 2019 18:25:31 GMT

It's interesting tech for sure, but it still seems fairly nascent.
I suspect wider adoption will be needed before we consider adding it to the product.

Re: WireGuard

Ole_Jakobsen — Mon, 21 Sep 2020 06:08:55 GMT

Some time have passed now, and adoption have increased notably, some very be companies are running trials where they seek to replace both Cisco and Check Point VPN.

Any news on Check Point's implementing support for WireGuard?

Re: WireGuard

PhoneBoy — Mon, 21 Sep 2020 06:18:48 GMT

I am not aware of any specific plans to implement WireGuard.
If it is a requirement for you, I recommend engaging with your local Check Point office.

Re: WireGuard

juju42 — Wed, 19 Jan 2022 18:16:41 GMT

Mikrotik and AVM did it. I Cant wait for Checkpoint to do so. 🙂

Re: WireGuard

baimagambetov — Wed, 31 Aug 2022 05:12:29 GMT

Hi all!
Does anyone know if WireGuard technology has already been implemented?

Re: WireGuard

_Val_ — Wed, 31 Aug 2022 06:44:18 GMT

AFAIK, the answer is still no. If you need it, please open an RFE with your local Check Point office representative.

Re: WireGuard

Martin_Valenta — Thu, 11 Jul 2024 08:55:53 GMT

since Harmony SASE support Wireguard, how about have Wireguard support on Gaia OS Firewalls?

Re: WireGuard

PhoneBoy — Thu, 11 Jul 2024 16:15:07 GMT

I believe this is under consideration as part of a larger effort to unify elements of Harmony SASE and Endpoint.

Re: WireGuard

Robin — Thu, 31 Oct 2024 14:47:02 GMT

This would be nice...

Re: WireGuard

reldred — Wed, 07 May 2025 06:58:01 GMT

Not sure how far those discussions got but this would be a terrific capability to add; Wireguard has a lot of vendor support now, even Unifi added it to their appliances (Easy for them, granted, they're all Debian Linux under the hood). The protocol is very robust, very fast, and survivable with clients behind ugly CGNAT setups such as mobile operators and Starlink, etc. Very good option for site to site tunnels where satellite sites are on less than ideal carriage.

Re: WireGuard

PhoneBoy — Wed, 07 May 2025 14:36:13 GMT

Considering we're using Wireguard in Harmony SASE, I think we understand the value of it 🙂
I've not heard anything about integrating it into the Quantum Security Gateway as of yet, which I imagine is not a trivial task.