topic Re: GRE tunnel keepalive in Firewall and Security Management

GRE tunnel keepalive

Maksimus — Tue, 08 Oct 2024 06:21:09 GMT

I am planing to create GRE tunnels between Checkpoint gateway and 3rd party device, but unfortunately do not find any option to setup keepalive parameters for the tunnel.

Does Checkpoint support GRE keepalive feature?

Re: GRE tunnel keepalive

G_W_Albrecht — Tue, 08 Oct 2024 10:10:15 GMT

R81.20 Gaia Administration Guide - GRE Interfaces

sk169794: GRE Configuration Guide

sk172565: GRE tunnel traffic does not pass through Security Gateway

sk175385: How to set up GRE between a Check Point Security Gateway and Zscaler ZIA Public Service Edge

sk157893: Check Point recommendations for tunneling through IPsec instead of GRE

Re: GRE tunnel keepalive

Maksimus — Tue, 08 Oct 2024 13:45:54 GMT

Many thanks, @G_W_Albrecht

I've seen this before. Base on this information Checkpoint do not support keepalive feature.

I thought maybe somebody faced with the same.

Re: GRE tunnel keepalive

G_W_Albrecht — Wed, 09 Oct 2024 08:22:03 GMT

Usually, a VPN will go up if down when a packet is sent thru - so a ping should do the trick...

Re: GRE tunnel keepalive

Maksimus — Thu, 10 Oct 2024 06:50:34 GMT

When we talking about GRE without keepalive VPN interface will be always UP. And for sure we can do ICMP probe to check status. I just want to clarify do Checkpoint support it or not )