https://community.checkpoint.com/t5/Firewall-and-Security-Management/Failover-CP-3200-VPN-connections-to-DRaaS-site-who-uses-a/m-p/244060#M47494 <P>Thanks.&nbsp; I was reading the MEP docs and looking at the various methods.&nbsp; I'll probably have some&nbsp; followup questions when I get closer to having to set it up.&nbsp; &nbsp;</P> Tue, 18 Mar 2025 11:24:42 GMT Perry_McGrew 2025-03-18T11:24:42Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Failover-CP-3200-VPN-connections-to-DRaaS-site-who-uses-a/m-p/243749#M47397 <P>We have several small sites that have CP3200 GW's that have P2P VPN connection to our Corporate CP5800 HA GWs - Hub and Spoke design.&nbsp; &nbsp;These sites are NOT on any SD-WAN configuration -- just using Spectrum Business Class or VZN FiOS to get onto the Internet&nbsp;&nbsp;</P><P>We are setting up a DRaaS site with our Service Provider.&nbsp; &nbsp;The initial design is that our DataCenter is down, and the company will be operating out at the DRaaS site.&nbsp; &nbsp;Obviously, the corporate 5800 FWs are now "offline"</P><P>All our CP devices are R82.&nbsp; &nbsp;</P><P>The remote CP3200's default route just point to the ISP's Gateway.&nbsp; So, I am looking to see if setting up a redundant VPN tunnel to a non-CP gateway is possible with the CP3200 and are there anyone or docs (that I have not been able to find yet) that explain how to set this up.&nbsp;&nbsp;</P><P>FWIW, we do not use or are licensed for any Harmony products to connect remote users.&nbsp; We have Cloudflare's ZeroTrust for end-user access.&nbsp; &nbsp;</P><P>This post is just to find out how / if it's possible to create secondary VPN off each remote site's 3200 that would take over if the primary VPN connection into the Corp datacenter's 5800 went down.&nbsp; &nbsp;</P><P>TIA - Perry</P> Thu, 13 Mar 2025 15:17:59 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Failover-CP-3200-VPN-connections-to-DRaaS-site-who-uses-a/m-p/243749#M47397 Perry_McGrew 2025-03-13T15:17:59Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Failover-CP-3200-VPN-connections-to-DRaaS-site-who-uses-a/m-p/243990#M47475 <P>I believe this is possible with a MEP configuration:&nbsp;<A href="https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_SitetoSiteVPN_AdminGuide/Content/Topics-VPNSG/MEP.htm" target="_blank">https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_SitetoSiteVPN_AdminGuide/Content/Topics-VPNSG/MEP.htm</A>&nbsp;<BR /><BR /></P> Mon, 17 Mar 2025 19:06:45 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Failover-CP-3200-VPN-connections-to-DRaaS-site-who-uses-a/m-p/243990#M47475 PhoneBoy 2025-03-17T19:06:45Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Failover-CP-3200-VPN-connections-to-DRaaS-site-who-uses-a/m-p/244060#M47494 <P>Thanks.&nbsp; I was reading the MEP docs and looking at the various methods.&nbsp; I'll probably have some&nbsp; followup questions when I get closer to having to set it up.&nbsp; &nbsp;</P> Tue, 18 Mar 2025 11:24:42 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Failover-CP-3200-VPN-connections-to-DRaaS-site-who-uses-a/m-p/244060#M47494 Perry_McGrew 2025-03-18T11:24:42Z