topic Re: Check Point R80.30 Cluster load sharing with IPSec VPN enable in Firewall and Security Management

Check Point R80.30 Cluster load sharing with IPSec VPN enable

Support_Team_Bi — Mon, 19 Oct 2020 02:47:56 GMT

I want to know when Cluster load sharing with IPSec VPN enable can use in version R80.30

Re: Check Point R80.30 Cluster load sharing with IPSec VPN enable

PhoneBoy — Mon, 19 Oct 2020 05:59:48 GMT

Follow the steps in this SK: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk162637
For background on the issue, see: https://community.checkpoint.com/t5/General-Topics/When-will-checkpoint-support-the-Load-Sharing-mode-in-either-R80/m-p/58571

Re: Check Point R80.30 Cluster load sharing with IPSec VPN enable

Support_Team_Bi — Mon, 19 Oct 2020 07:32:10 GMT

PhoneBoy,

Thank you, but I see important "ClusterXL in Load Sharing mode is not supported with IPSec VPN blade enabled" please confirm that can work with IPSec ?

Re: Check Point R80.30 Cluster load sharing with IPSec VPN enable

PhoneBoy — Mon, 19 Oct 2020 13:45:38 GMT

The steps above are needed to enable Load Sharing on R80.20+.
I had forgotten that Load Sharing VPN was still a limitation with the details why not explained in the thread linked previously.
It is something we plan to add back in a future release (checking on the current ETA).
I would also engage with your local Check Point office around this requirement.

Re: Check Point R80.30 Cluster load sharing with IPSec VPN enable

PhoneBoy — Tue, 20 Oct 2020 01:55:59 GMT

Hi, just to update, it looks like there is a customer release that enables Load Sharing + VPN for R80.40.
This is currently targeted to be added to maintrain in an upcoming release (not R81).
Please engage with your local Check Point office to obtain this release.

Re: Check Point R80.30 Cluster load sharing with IPSec VPN enable

Support_Team_Bi — Wed, 21 Oct 2020 04:08:54 GMT

In R80.30 can enable in the future hotfix right ?

Re: Check Point R80.30 Cluster load sharing with IPSec VPN enable

PhoneBoy — Wed, 21 Oct 2020 05:00:09 GMT

As far as I know, it’s not planned for a R80.30 JHF.
You should work with your local Check Point office on this requirement.