topic Auto Fail Over Site to Site VPN with Other Devices in General Topics

Auto Fail Over Site to Site VPN with Other Devices

Rajath_K_R — Sat, 02 Mar 2019 06:21:03 GMT

Can I Create a Auto Fail Over Redundant Site to Site VPN Tunnel With Zscaler Cloud Using Probing Method Under Link Selection in IPSEC VPN ?

I Read from Article that check point Doesn't support auto fail over VPN with Other devices.

Re: Auto Fail Over Site to Site VPN with Other Devices

Wolfgang — Sat, 02 Mar 2019 18:13:26 GMT

That‘s not possible.

Link selection and link probing is a proprietary process via UDP 259. This works only between Check Point Gateways.

Wolfgang

Re: Auto Fail Over Site to Site VPN with Other Devices

PhoneBoy — Sat, 02 Mar 2019 18:19:48 GMT

It should be possible if you configure Dead Peer Detection.

It's not the default.

See option 5 here: VPN Site-to-Site with 3rd party

Re: Auto Fail Over Site to Site VPN with Other Devices

PhoneBoy — Thu, 07 Mar 2019 03:37:36 GMT

To clarify, this will be possible in R80.30, which is EA at the moment.

There is a customer release on top of R80.20 that also enables this functionality that you may be able to obtain through your local Check Point office.