https://community.checkpoint.com/t5/General-Topics/Site-to-Site-in-smart-1-with-different-policy/m-p/164942#M27509 <P>Hi ,</P><P>&nbsp;</P><P>Need some recommendation, we have below setup&nbsp;</P><P>2 Checkpoint 6600 FW in DC and 1 5800 FW in Branch (all three FW&nbsp; connected to smart 1 for mgmt) and both sites&nbsp; have separate policies in smart 1 mgmt.</P><P>&nbsp;We are planning to do site to site vpn through certificate following this link</P><P><A href="https://community.checkpoint.com/t5/Security-Gateways/HowTo-Set-Up-Certificate-Based-VPNs-with-Check-Point-Appliances/td-p/73299" target="_blank">https://community.checkpoint.com/t5/Security-Gateways/HowTo-Set-Up-Certificate-Based-VPNs-with-Check-Point-Appliances/td-p/73299</A></P><P>&nbsp;</P><P>Now the question is as they both have separate policies would just publishing the policy to specific gateways and adding access rules in each gateway suffice the configuration(apart from creating community and ipsec config) ?&nbsp;</P><P>&nbsp;</P> Tue, 13 Dec 2022 05:55:06 GMT Karan0587 2022-12-13T05:55:06Z https://community.checkpoint.com/t5/General-Topics/Site-to-Site-in-smart-1-with-different-policy/m-p/164942#M27509 <P>Hi ,</P><P>&nbsp;</P><P>Need some recommendation, we have below setup&nbsp;</P><P>2 Checkpoint 6600 FW in DC and 1 5800 FW in Branch (all three FW&nbsp; connected to smart 1 for mgmt) and both sites&nbsp; have separate policies in smart 1 mgmt.</P><P>&nbsp;We are planning to do site to site vpn through certificate following this link</P><P><A href="https://community.checkpoint.com/t5/Security-Gateways/HowTo-Set-Up-Certificate-Based-VPNs-with-Check-Point-Appliances/td-p/73299" target="_blank">https://community.checkpoint.com/t5/Security-Gateways/HowTo-Set-Up-Certificate-Based-VPNs-with-Check-Point-Appliances/td-p/73299</A></P><P>&nbsp;</P><P>Now the question is as they both have separate policies would just publishing the policy to specific gateways and adding access rules in each gateway suffice the configuration(apart from creating community and ipsec config) ?&nbsp;</P><P>&nbsp;</P> Tue, 13 Dec 2022 05:55:06 GMT https://community.checkpoint.com/t5/General-Topics/Site-to-Site-in-smart-1-with-different-policy/m-p/164942#M27509 Karan0587 2022-12-13T05:55:06Z https://community.checkpoint.com/t5/General-Topics/Site-to-Site-in-smart-1-with-different-policy/m-p/165051#M27519 <P>More or less, yes.</P> Tue, 13 Dec 2022 14:21:43 GMT https://community.checkpoint.com/t5/General-Topics/Site-to-Site-in-smart-1-with-different-policy/m-p/165051#M27519 PhoneBoy 2022-12-13T14:21:43Z