topic Checkpoint cluster Site-ti-Site VPN - PaloAlto (Dual ISP) Fails Over in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-cluster-Site-ti-Site-VPN-PaloAlto-Dual-ISP-Fails-Over/m-p/230110#M44284 <P>Dear mates,</P><P>&nbsp;</P><P>I have a scenario, a PaloAlot having two ISP and we want to configure two VPN links to Checkpoint cluster single ISP.</P><P>From Palo Alto, there is a tunnel IF with a private IP that you can use for failover monitoring, but on the Checkpoint end, the packet comes and decrypted with action drop since the IP is also part of the internal range.&nbsp;</P><P>On checkpoint, I set up a single VPN community (STAR), with checkpoint as the center and two PaloAlto objects satellite (same domain subnet).</P><P>&nbsp;</P><P>Is there any guide regarding this case?&nbsp;</P><P>Cheers</P> Fri, 18 Oct 2024 08:06:11 GMT SdanteMate 2024-10-18T08:06:11Z Checkpoint cluster Site-ti-Site VPN - PaloAlto (Dual ISP) Fails Over https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-cluster-Site-ti-Site-VPN-PaloAlto-Dual-ISP-Fails-Over/m-p/230110#M44284 <P>Dear mates,</P><P>&nbsp;</P><P>I have a scenario, a PaloAlot having two ISP and we want to configure two VPN links to Checkpoint cluster single ISP.</P><P>From Palo Alto, there is a tunnel IF with a private IP that you can use for failover monitoring, but on the Checkpoint end, the packet comes and decrypted with action drop since the IP is also part of the internal range.&nbsp;</P><P>On checkpoint, I set up a single VPN community (STAR), with checkpoint as the center and two PaloAlto objects satellite (same domain subnet).</P><P>&nbsp;</P><P>Is there any guide regarding this case?&nbsp;</P><P>Cheers</P> Fri, 18 Oct 2024 08:06:11 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-cluster-Site-ti-Site-VPN-PaloAlto-Dual-ISP-Fails-Over/m-p/230110#M44284 SdanteMate 2024-10-18T08:06:11Z Re: Checkpoint cluster Site-ti-Site VPN - PaloAlto (Dual ISP) Fails Over https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-cluster-Site-ti-Site-VPN-PaloAlto-Dual-ISP-Fails-Over/m-p/230179#M44298 <P>This requires <A href="https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SitetoSiteVPN_AdminGuide/Content/Topics-VPNSG/MEP.htm" target="_self">MEP</A>.</P> Fri, 18 Oct 2024 18:55:42 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-cluster-Site-ti-Site-VPN-PaloAlto-Dual-ISP-Fails-Over/m-p/230179#M44298 PhoneBoy 2024-10-18T18:55:42Z