topic Re: MPLS and ISP connection in Firewall and Security Management

MPLS and ISP connection

007_mjn — Thu, 31 Aug 2023 10:21:04 GMT

Hi Checkpoint Team,

I have two connections on my firewall one is MPLS AND second one is ISP.

My firewall is connected to management server over MPLS IP i.e. 10.21.40.1

Now my mpls connection is down and on management server it shows connection lost with firewall. which is obvious.

But I have second connection too i.e. ISP and its working fine. I have attached the image.

my question is why it didn't move to that connection automatically so in management server it didn't show connection is lost with firewall.

How do I solve this please suggest me any suggestion regarding this....

Re: MPLS and ISP connection

G_W_Albrecht — Thu, 31 Aug 2023 10:47:44 GMT

How did you configure ISP Redundancy on SMS and GW ?

sk34812: ISP Redundancy configuration

sk56384: How To Create a Redundant, Service-based MPLS/Encrypted Link VPN

Re: MPLS and ISP connection

007_mjn — Thu, 31 Aug 2023 11:01:45 GMT

I have configured ISP redundancy on smart console. where we can select primary and secondary ISP priority. you can see in image below.

And there is no ISP redundancy on management server.

Re: MPLS and ISP connection

G_W_Albrecht — Thu, 31 Aug 2023 11:19:03 GMT

If there is no ISP redundancy on management server, it is clear that the management server shows connection is lost with firewall - his only connection over MLPS has been shut down... This also would mean that SMS only is connected to the internet by MPLS over GW.

Re: MPLS and ISP connection

007_mjn — Thu, 31 Aug 2023 11:31:02 GMT

How should I do ISP redundancy on management server because there is no option to select ISP redundancy on management server? Is there any SK available for it.