topic Re: Route Traffic in General Topics

Route Traffic

handiansudianto — Fri, 17 Feb 2023 13:58:25 GMT

I have 2 different ISP connected to the checkpoint, and want to know how to route traffic from several group. So for example i want to route traffic from group-1 to ISP-1 and group-2 to ISP-2.

Re: Route Traffic

Chris_Atkinson — Fri, 17 Feb 2023 14:03:19 GMT

One option depending on the particulars might be:

sk100500 - Policy-Based Routing (PBR) on Gaia OS

Re: Route Traffic

the_rock — Fri, 17 Feb 2023 14:56:45 GMT

I agree with Chris 100%...PBR is most likely your answer here.

Re: Route Traffic

Bob_Zimmerman — Fri, 17 Feb 2023 16:02:19 GMT

One important note: PBR does not apply to traffic from the firewall itself. Traffic the firewall sends (e.g, connecting out to Check Point for IPS/AV/URL Filtering data) would take only the normal routing table, so would only take one of the ISPs.

Another option might be VSX. It allows you to set up multiple routing tables on the firewall (like Cisco VRF, Fortinet vdom, Palo Alto sys). Traffic routed to one firewall interface hits one routing table. Traffic routed to a different interface hits a different routing table. Each firewall context would then handle a single ISP.