topic Re: VPN Certificate Upgrade - VPN Disconnect? in General Topics

VPN Certificate Upgrade - VPN Disconnect?

seanmc12 — Tue, 20 Aug 2024 14:13:55 GMT

Will Checkpoint VPN disconnect if I upgrade the Checkpoint VPN Certificate? I need to upgrade our VPN Cert, but do not want to disconnect any active sessions. I think the VPN clients will stay connect and renew once they disconnect and reconnect. Can anyone confirm. Not finding any verbiage in the documentation on that.

Re: VPN Certificate Upgrade - VPN Disconnect?

G_W_Albrecht — Tue, 20 Aug 2024 14:31:50 GMT

Are you talking about S2S or RA VPN ? RA VPN is the issue as clients must manually accept the new fingerprint...

Re: VPN Certificate Upgrade - VPN Disconnect?

JozkoMrkvicka — Tue, 20 Aug 2024 20:59:55 GMT

This is not true. Only in case InternalCA cert (on management) is renewed, end users will need to accept new fingerprint.

If only VPN certificate (inside RA VPN gateway object) is about to be renewed, it will not disconnect any users and no need to accept any certificate.

See sk182070 for automatic IKE certificate renewal.

Re: VPN Certificate Upgrade - VPN Disconnect?

seanmc12 — Wed, 21 Aug 2024 11:05:36 GMT

Thank you.