topic Re: The Affects after Renew the VPN certificate in SmartConsole? in Firewall and Security Management

The Affects after Renew the VPN certificate in SmartConsole?

Mk_83 — Tue, 02 Jul 2024 10:41:01 GMT

Hello everyone,

Currently we have VPN certificate warning:

Follow the sk178304 recommendations: https://support.checkpoint.com/results/sk/sk178304, we saw that we need to renew VPN certificate.

I am concerned that when renewing VPN certificate it will cause loss of Site-to-Site VPN connection, Remote Access VPN (user

local authen using cert) is currently active.

Is there anything I need to pay attention to when renew VPN Certificate to reduce incident? Because this is a product environment (critical).

Please help me the answer..

Thank you so much,

Best Regards.

Re: The Affects after Renew the VPN certificate in SmartConsole?

_Val_ — Tue, 02 Jul 2024 10:52:31 GMT

GW VPN certificate renewal should not affect VPN services, both site-to-site and Remote Access. Just make sure you reinstall policy to all FWs in the community.

Re: The Affects after Renew the VPN certificate in SmartConsole?

Mk_83 — Tue, 02 Jul 2024 11:16:31 GMT

Thanks _Val_ for your early response,
I will proceed to renew VPN Cert tomorrow.

Best Regard.

Re: The Affects after Renew the VPN certificate in SmartConsole?

the_rock — Tue, 02 Jul 2024 11:42:20 GMT

I can guarantee you nothing will happen. I had done this probably 100+ times, never had an issue with either RA or S2S. You can do it pretty much any time. As @_Val_ said, just install the policy afterwards.

Andy

Re: The Affects after Renew the VPN certificate in SmartConsole?

Mk_83 — Tue, 02 Jul 2024 12:46:07 GMT

Hi the_rock,
Thanks for your confirmation.

Best Regards.

Re: The Affects after Renew the VPN certificate in SmartConsole?

the_rock — Tue, 02 Jul 2024 12:49:45 GMT

No problem.