topic Re: Route-Based VPN Tutorial: Check Point SASE and Check Point HA Cluster in SASE and Remote Access

Route-Based VPN Tutorial: Check Point SASE and Check Point HA Cluster

Shay_Levin — Thu, 30 Jan 2025 12:45:00 GMT

This video tutorial walks you through the process of configuring a Route-Based VPN between Check Point SASE and a Check Point High Availability (HA) Cluster, using BGP for dynamic routing. You'll learn step-by-step how to set up VPN tunnels, configure BGP, and troubleshoot common issues to ensure a secure and seamless connection.

📄 At the bottom of this post, you'll find two manuals for your reference:
✅ One for the HA Cluster, aligned with the video.
✅ One for a single Quantum Gateway configuration.
For any questions, feel free to reply here!

Re: Route-Based VPN Tutorial: Check Point SASE and Check Point HA Cluster

rasmuswiegman — Fri, 13 Jun 2025 20:07:52 GMT

Hi Shay,

Thanks for the Video and manuals.

In a real world scenario, the route distribution part doesn't seem to be covered that great.

If you have multiple networks, both via static routes and directly connected, i guess you would have to use routemaps, correct? Or is there another "easier" way of advertising multiple networks, using different protocols?

Rasmus Wiegman

Re: Route-Based VPN Tutorial: Check Point SASE and Check Point HA Cluster

Shay_Levin — Mon, 23 Jun 2025 11:41:24 GMT

You're right there are two options to control BGP redistribution.

The method I demonstrated uses route redistribution, which supports both directly connected networks and static routes.

The other option is to use a route map.