https://community.checkpoint.com/t5/SASE-and-Remote-Access/Manual-MEP-and-Load-Sharing/m-p/85051#M10464 <P>Gateway are running R80.30, latest Take 191.<BR />And my client The Check Point Mobile for Windows version E92.50,&nbsp; but this is consistent with users on older version as well.</P> Wed, 13 May 2020 12:21:16 GMT Scott_Bily 2020-05-13T12:21:16Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/Manual-MEP-and-Load-Sharing/m-p/84983#M10462 <P>I have been doing some testing with Virtual Gateway in Azure, for our IPSec remote Access VPN setup. &nbsp; &nbsp;&nbsp; It is configured using a manual mep configuration, and with load sharing. &nbsp;&nbsp; I currently have 2 gateways participating in the manual mep configuration.</P><P>When I first set this up, my tests showed that my Check Point Mobile for Windows client would round-robin connections between the gateways. &nbsp; Meaning if I was connected to Gateway A,&nbsp; after a disconnect, the next connection would then connect me to Gateway B. &nbsp;&nbsp; Which i how I thought i understood that load sharing&nbsp; was supposed to work. &nbsp;</P><P>&nbsp; But my latest round of tests, my VPN client seems to always prefer the same gateway that I was last connected to. &nbsp; And to my knowledge nothing has changed in my configurations. &nbsp;&nbsp; So I am questioning if load sharing is actually working.&nbsp; Would anyone&nbsp; on CheckMates possibly have an explanation for this behavior change. &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</P><P>Both my gateway in mep are still functioning.&nbsp;&nbsp; I validate this by removing my last connection (Gateway A)&nbsp; from the Remote Access Community and pushing policy. &nbsp;&nbsp;&nbsp; My client would connect to the Gateway&nbsp; B without issue. &nbsp; &nbsp; &nbsp; I just don't understand why the round robin behaviour seemed to stop. &nbsp;&nbsp;</P> Tue, 12 May 2020 20:24:14 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Manual-MEP-and-Load-Sharing/m-p/84983#M10462 Scott_Bily 2020-05-12T20:24:14Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/Manual-MEP-and-Load-Sharing/m-p/85002#M10463 What version of gateway and client? Wed, 13 May 2020 02:48:27 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Manual-MEP-and-Load-Sharing/m-p/85002#M10463 PhoneBoy 2020-05-13T02:48:27Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/Manual-MEP-and-Load-Sharing/m-p/85051#M10464 <P>Gateway are running R80.30, latest Take 191.<BR />And my client The Check Point Mobile for Windows version E92.50,&nbsp; but this is consistent with users on older version as well.</P> Wed, 13 May 2020 12:21:16 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Manual-MEP-and-Load-Sharing/m-p/85051#M10464 Scott_Bily 2020-05-13T12:21:16Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/Manual-MEP-and-Load-Sharing/m-p/85345#M10465 Just to be clear, MEP does not do true load balancing.<BR />The client should randomly select a gateway for connection.<BR />Shouldn't always pick the same one, but maybe that's bad luck? Fri, 15 May 2020 01:38:32 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Manual-MEP-and-Load-Sharing/m-p/85345#M10465 PhoneBoy 2020-05-15T01:38:32Z