topic Re: IPSEC VPN Migration in General Topics

IPSEC VPN Migration

SriNarasimha005 — Mon, 10 Mar 2025 14:37:28 GMT

Hi All

We are preparing to upgrade the current EOL Checkpoint firewalls to the latest hardware series, which has IPSEC VPN enabled. We will not be altering the public IP from our side, as this will be a direct replacement with the existing configuration.

Will the inclusion of the new Cluster in the VPN community be sufficient, or is it necessary to re-enter the PSK?

Furthermore, please inform me if there are any additional steps required to ensure the successful establishment of the VPN tunnel.

Thank you.

Re: IPSEC VPN Migration

Alex- — Mon, 10 Mar 2025 14:55:23 GMT

The PSK resides in the VPN community for external interoperable objects, so adding your new cluster in the community should be sufficient.

Re: IPSEC VPN Migration

SriNarasimha005 — Fri, 25 Apr 2025 04:11:19 GMT

Hi @Alex-

Furthermore, given that the VPN community is located within the CMA, duplicating the current policy package and associating it with the new firewalls, I believe it does not necessitate re-entering the PSK.

Is my understanding correct?