topic Re: IPSec between R81.20 VS gateway and MS Azure gateway in General Topics

IPSec between R81.20 VS gateway and MS Azure gateway

Daniel_Cimpeanu — Tue, 18 Jun 2024 10:30:38 GMT

Hi,

I'm looking for some guidance in regards to creating an IPSec tunnel between a R81.20 VS gateway and MS Azure gateway controlled by a 3rd party;

What I see from my end is successful peering - both Phase 1 and Phase 2, but the end-to-end communication does not go through the tunnel. I'm running AES265/SHA256, DG group 19 for Phase 1, and AES256/SHA256 with PFS SH Group 19

vpn tu tlist shows me an SPI for the tunnel, SmartView Monitor shows the tunnel as Up. Seen from Checkpoint side, all should be in place and working, yet it doesn't.

I have heard from the 3rd party mentioning that in their experience they have seen pre-R81.20 gateways working fine in similar scenarios but failing after an R81.20 upgrade, problem which gor presumably resolved by including an (unknown) Checkpoint ID?? for the Traffic Selectors - I'm puzzled by this statement, haven'd heard anything about this myself.

Any advice is appreciated, I've spent a lot of hours on this without any progress at all. 😞

Thanks,

Daniel

Re: IPSec between R81.20 VS gateway and MS Azure gateway

Alex- — Tue, 18 Jun 2024 10:42:07 GMT

We successfully configured VPN's to Azure with R81.20 (both VS and ClusterXL) using the following resources:

https://support.checkpoint.com/results/sk/sk101275

https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-devices#RouteBasedOffers

Your values might be outside what is supported on the Azure side.

Re: IPSec between R81.20 VS gateway and MS Azure gateway

Daniel_Cimpeanu — Tue, 18 Jun 2024 11:54:12 GMT

Was it IKE v1 or V2 you ended up using?

Re: IPSec between R81.20 VS gateway and MS Azure gateway

the_rock — Tue, 18 Jun 2024 12:09:21 GMT

See if below post I made helps, if not, let me know, happy to help further.

Andy

https://community.checkpoint.com/t5/Security-Gateways/Route-based-VPN-tunnel-to-Azure/m-p/206179/emcs_t/S2h8ZW1haWx8dG9waWNfc3Vic2NyaXB0aW9ufExTTjlYV1FXMUlGQVNMfDIwNjE3OXxTVUJTQ1JJUFRJT05TfGhL#M38950