topic Problem VPN with AWS Gateway and Checkpoint OnPremise in General Topics https://community.checkpoint.com/t5/General-Topics/Problem-VPN-with-AWS-Gateway-and-Checkpoint-OnPremise/m-p/8481#M1061 <HTML><HEAD></HEAD><BODY><P>VPN is one direction only (AWS-Checkpoint on premise); VPN tunnel is established; packet&nbsp; to AWS not match the rule of the VPN.&nbsp;&nbsp;</P></BODY></HTML> Fri, 23 Nov 2018 20:50:22 GMT Jesus_Vladimir_ 2018-11-23T20:50:22Z Problem VPN with AWS Gateway and Checkpoint OnPremise https://community.checkpoint.com/t5/General-Topics/Problem-VPN-with-AWS-Gateway-and-Checkpoint-OnPremise/m-p/8481#M1061 <HTML><HEAD></HEAD><BODY><P>VPN is one direction only (AWS-Checkpoint on premise); VPN tunnel is established; packet&nbsp; to AWS not match the rule of the VPN.&nbsp;&nbsp;</P></BODY></HTML> Fri, 23 Nov 2018 20:50:22 GMT https://community.checkpoint.com/t5/General-Topics/Problem-VPN-with-AWS-Gateway-and-Checkpoint-OnPremise/m-p/8481#M1061 Jesus_Vladimir_ 2018-11-23T20:50:22Z Re: Problem VPN with AWS Gateway and Checkpoint OnPremise https://community.checkpoint.com/t5/General-Topics/Problem-VPN-with-AWS-Gateway-and-Checkpoint-OnPremise/m-p/8482#M1062 <HTML><HEAD></HEAD><BODY><P>Only being able to establish a VPN in one direction is usually the result of a configuration error.</P><P>Unfortunately, you haven't told us much about the configuration you have.</P><P>So far, all I know is you have an on-premise Check Point gateway.</P><P>What version?</P><P>How is it exactly configured?</P><P>What are you connecting to on the remote end? (AWS directly? A Check Point instance?)</P><P>What troubleshooting have you done?</P><P>What log messages have you seen?</P><P>Maybe also look at:&nbsp;<A href="https://community.checkpoint.com/docs/DOC-3023-vpn-troubleshooting-commands" target="_blank">https://community.checkpoint.com/docs/DOC-3023-vpn-troubleshooting-commands</A>&nbsp;</P></BODY></HTML> Fri, 21 Jun 2019 09:00:19 GMT https://community.checkpoint.com/t5/General-Topics/Problem-VPN-with-AWS-Gateway-and-Checkpoint-OnPremise/m-p/8482#M1062 PhoneBoy 2019-06-21T09:00:19Z Re: Problem VPN with AWS Gateway and Checkpoint OnPremise https://community.checkpoint.com/t5/General-Topics/Problem-VPN-with-AWS-Gateway-and-Checkpoint-OnPremise/m-p/8483#M1063 <HTML><HEAD></HEAD><BODY><P><SPAN style="color: #000000;">I'd like to inroduce you the checklist about configuring VPN. Please check all the steps and may be you will find misconfiguration in your case:</SPAN></P><UL style="color: black; background-color: #ffffff; font-weight: normal; font-size: 14px; padding: 0px 0px 10px 32px;"><LI style="color: black; padding: 2px 0px 3px 5px;"><SPAN style="color: #000000;">Define encryption domains for each site</SPAN></LI><LI style="color: black; padding: 2px 0px 3px 5px;"><SPAN style="color: #000000;">Define firewall workstation objects for each site</SPAN></LI><LI style="color: black; padding: 2px 0px 3px 5px;"><SPAN style="color: #000000;">Configure the gateway objects for the correct encryption domain</SPAN></LI><LI style="color: black; padding: 2px 0px 3px 5px;"><SPAN style="color: #000000;">Configure the extranet community with the appropriate gateways and objects</SPAN></LI><LI style="color: black; padding: 2px 0px 3px 5px;"><SPAN style="color: #000000;">Create the necessary encryption rules.</SPAN></LI><LI style="color: black; padding: 2px 0px 3px 5px;"><SPAN style="color: #000000;">Configure the encryption properties for each encryption rule.</SPAN></LI><LI style="color: black; padding: 2px 0px 3px 5px;"><SPAN style="color: #000000;">Install the security Policy</SPAN></LI></UL><P><SPAN style="color: #000000;">Likewise Dameon asked you good questions.</SPAN></P><P><SPAN style="color: #000000;"> Can you&nbsp;indentify the peer? If you are&nbsp;not may be the problem is hidden in:</SPAN></P><UL style="color: black; background-color: #ffffff; font-weight: normal; font-size: 14px; padding: 0px 0px 10px 32px;"><LI style="color: black; padding: 2px 0px 3px 5px;"><SPAN style="color: #000000;">rules refer to an object that is not part of the local firewalls encryption domain</SPAN></LI><LI style="color: black; padding: 2px 0px 3px 5px;"><SPAN style="color: #000000;">may have overlapping encryption domains</SPAN></LI><LI style="color: black; padding: 2px 0px 3px 5px;"><SPAN style="color: #000000;">2 peers in the same domain</SPAN></LI><LI style="color: black; padding: 2px 0px 3px 5px;"><SPAN style="color: #000000;">sk18972 – explains overlapping with IP addresses and how to configure manual NAT rules</SPAN></LI></UL></BODY></HTML> Sat, 24 Nov 2018 06:16:56 GMT https://community.checkpoint.com/t5/General-Topics/Problem-VPN-with-AWS-Gateway-and-Checkpoint-OnPremise/m-p/8483#M1063 Egor_Cherkasov 2018-11-24T06:16:56Z