topic Re: Configuration palo alto vpns on checkpoint gateway in active/standbay in Firewall and Security Management

Configuration palo alto vpns on checkpoint gateway in active/standbay

Steven26 — Fri, 12 Jul 2024 18:59:41 GMT

In the first instance, help is required to set up 3 Site to Site VPNs, whose objective is to establish MEX-COL communication when our MPLS channel goes down, however the peculiarity is that there are 3 sites that will be available as in an active mode. standby and consequently 2 and 3 will be a backup when 1 falls.

Re: Configuration palo alto vpns on checkpoint gateway in active/standbay

PhoneBoy — Mon, 15 Jul 2024 17:59:34 GMT

An actual network diagram of what you're trying to achieve will help.
You mention Palo Alto gateways...please ensure to notate them on the diagram.

Re: Configuration palo alto vpns on checkpoint gateway in active/standbay

Steven26 — Mon, 15 Jul 2024 18:18:54 GMT

At the moment I only have this diagram.

Re: Configuration palo alto vpns on checkpoint gateway in active/standbay

PhoneBoy — Mon, 15 Jul 2024 18:54:04 GMT

That doesn't tell me what the expected traffic flows are and what vendor gateways are involved here (especially since you mention Palo Alto).
The more information you can provide about the proposed configuration, the more likely we can suggest the correct approach.

Re: Configuration palo alto vpns on checkpoint gateway in active/standbay

the_rock — Mon, 15 Jul 2024 19:20:18 GMT

We need more info as far as traffic involved.

Andy

Re: Configuration palo alto vpns on checkpoint gateway in active/standbay

the_rock — Mon, 15 Jul 2024 19:28:57 GMT

See if below post helps, though might be different subject...

Andy

https://community.checkpoint.com/t5/Security-Gateways/VPN-Check-Point-Palo-Alto-issue/m-p/217215#M41354