topic Re: Check Point S2S IPsec VPN Redundancy Query in Firewall and Security Management

Check Point S2S IPsec VPN Redundancy Query

chethan_m — Tue, 06 May 2025 16:23:44 GMT

Can a redundant site-to-site IPsec VPN tunnel be established between a Check Point 9000 series appliance at headquarters (HQ) and a centrally managed R81.10.X Quantum Spark 2000 SMB appliance at a branch site?

The headquarters appliance is running R82, which supports enhanced link selection. Can the SMB device handle this feature?

Both appliances are managed by the same Security Management Server.

The locally managed Quantum Spark admin guide indicates that it can be done under "Configuring VPN Sites". Do we have similar references for centrally managed devices?

Thank you

Re: Check Point S2S IPsec VPN Redundancy Query

PhoneBoy — Tue, 06 May 2025 17:10:04 GMT

The Enhanced Link Selection features require R82 code, which is currently not present on SMB devices.
However, you should be able to use the traditional Link Selection features to accomplish this.
For Centrally Managed SMB devices, it's configured in SmartConsole similar to regular gateways.

Re: Check Point S2S IPsec VPN Redundancy Query

chethan_m — Wed, 07 May 2025 06:23:50 GMT

Thank you very much. Will Check that out.