topic Re: Check Point Site-to-Site VPN Compatibility Matrix in General Topics

Check Point Site-to-Site VPN Compatibility Matrix

Danny — Mon, 15 Sep 2025 09:53:40 GMT

This document is a community project showcasing a matrix of Check Point Site-to-Site IPsec-VPN setups known to work with other vendors, tested and evaluated by members of Check Point's CheckMates community.

Check Point	Other VPN vendor	VPN method:	Evaluated by:
R81, R82	Cisco ASA	IKEv1, IKEv2	@Danny
R81, R82	Sophos UTM	IKEv1	@Danny
R81, R82	Fortinet FortiGate	IKEv1	@Danny
R81, R82	WatchGuard XTM	IKEv1	@Danny
R81, R82	Juniper SRX	IKEv1	@Danny
R81, R82 (vSEC on AWS)	Azure VPN (Basic)	IKEv1	@Ron_N
R81, R82 (vSEC on AWS)	Azure VPN (High Performance)	IKEv2	@Ron_N

Also see: VPN Datasheet

Re: Check Point Site-to-Site VPN Compatibility Matrix

PhoneBoy — Tue, 10 Oct 2017 23:33:13 GMT

Channeling Moti Sagey‌ as I write this response

Re: Check Point Site-to-Site VPN Compatibility Matrix

Moti — Wed, 11 Oct 2017 08:06:37 GMT

LOL

Re: Check Point Site-to-Site VPN Compatibility Matrix

Nikita_Mashko — Sat, 22 Sep 2018 10:16:48 GMT

Hi! help me please!

How do I configure the VPN Site (Site to site) on the 1490 device (webGUI) - ??

1 device = chqckpiont 1490

2 device = watchguard m200 (configured)

with a checkpoint 1490 (web GUI), I have never worked.

I've tried many options for setting the checkpoint

what you need to configure except: VPN -VPN Sites ?

Re: Check Point Site-to-Site VPN Compatibility Matrix

PhoneBoy — Sat, 22 Sep 2018 21:47:30 GMT

Not knowing anything about Watchguard systems, I can't tell you exactly what knobs you need to turn to make them talk.

But finding the answers to the following questions will help: what information do we need from the remote site customer when creating site to site VPN?

Re: Check Point Site-to-Site VPN Compatibility Matrix

Nikita_Mashko — Mon, 24 Sep 2018 05:36:30 GMT

I do not need Watshgard settings, I need to understand what I need to configure in checkpoint. what settings, which menu to go to? - it is through the WEB GUI

Re: Check Point Site-to-Site VPN Compatibility Matrix

PhoneBoy — Mon, 24 Sep 2018 12:13:37 GMT

The documentation I linked above should describe how to configure it.

Visually, you'd start here:

If your device is set for Central management, you will not see this menu.

That can be changed here:

Re: Check Point Site-to-Site VPN Compatibility Matrix

SantiagoPlatero — Thu, 08 Nov 2018 16:44:50 GMT

Hi all, don't know what the requirements are but I want to let you know I'm in condition to contribute with success cases for working S2S VPN from CP's R80.10 to Cisco ASA 5505(8.3) and/or Fortigate 600c(OS 5.2.4).

The S2S to Cisco ASA was fully developed by us (also we do a VPN from a CP 1450 R77.20.80 to the same ASA), but to the Fortigate was done by other people on the other side (maybe the next year will have some Fortigate here to play around).

Also the S2S to the Fortigate is a kind of a tricky one, as on the other side they have same subnets as we do, so we've to do some weird static NAT rules to make it work and don't overlap encryption domains.

Let me know how can I help the community with this, thanks

Re: Check Point Site-to-Site VPN Compatibility Matrix

Aidan_Luby — Tue, 24 Sep 2019 20:36:59 GMT

We ran a site to site VPN from a 2200 to a Cisco 2911 ISR until recently and it mostly worked okay.

Re: Check Point Site-to-Site VPN Compatibility Matrix

Johannes_Schoen — Wed, 25 Sep 2019 06:49:43 GMT

Palo Alto Networks works as well with IKEv1, verified with R77.30/R80.10/R80.20
Hadn't got it running with IKEv though.

Re: Check Point Site-to-Site VPN Compatibility Matrix

eball — Wed, 16 Sep 2020 10:03:18 GMT

Hi @Danny - just wondering if there was an updated version of this anywhere? Looking at compatibility issues of R80.40 with Juniper SRX on IKEv2

Re: Check Point Site-to-Site VPN Compatibility Matrix

Danny — Wed, 16 Sep 2020 10:43:20 GMT

This list lives from the replies of this community. Please describe your issues in more detail.

Re: Check Point Site-to-Site VPN Compatibility Matrix

eball — Wed, 16 Sep 2020 11:04:11 GMT

Hi @Danny just wondering if there was a more recently updated version of this? Looking at some issues R80.40 to Juniper SRX on IKEv2

Re: Check Point Site-to-Site VPN Compatibility Matrix

Danny — Wed, 16 Sep 2020 15:49:58 GMT

Again, this list as update-to-date as you make it.