Site to Site VPN

Shinchan — Thu, 13 Apr 2023 04:24:11 GMT

I want to establish site to site VPN between these firewalls and I want when computer 1 send http or icmp request to computer 2 only then Vpn enable

I am able to ping console 1 to console 2 but because the ip address of sales computer 1 is 218.1.76.1 I am not able to connect to firewall and outside networks and also not able to set default gateway 122.27.27.10 in sales computer 1

Peer please tell me how to connect sales computers to any network because the ip address is in very different from others

Re: Site to Site VPN

PhoneBoy — Fri, 14 Apr 2023 00:23:27 GMT

On the Check Point side, you would need to ensure that your encryption domain includes network/IP ranges with clients you want to be able to communicate through the VPN (i.e. be encrypted).
That means, using your diagram, 218.1.76.0/24 would need to be included in your encryption domain.
The other end would need to have its VPN configured to expect this subnet from your gateway (or use NAT).

The relevant clients would need to have a route to the relevant networks that traverses the Check Point gateway.
The gateway would also need to know how to communicate with the sales computers.
This is all basic routing configuration, the specifics of which are environment specific.

topic Re: Site to Site VPN in Firewall and Security Management

Site to Site VPN

Re: Site to Site VPN