topic R81.10 Delete and adding existing site - Checkpoint Endpoint Security to resolve VPN connectivity. in SASE and Remote Access

R81.10 Delete and adding existing site - Checkpoint Endpoint Security to resolve VPN connectivity.

EDE1 — Mon, 19 Jun 2023 06:53:58 GMT

Good day,

I've noticed that at times when I'm trying to connect via VPN it is not successful until I delete the site and create it again in the Checkpoint Endpoint Security.

Can you please tell me the reason why this is happening and when it is required to recreate a site?...

Interested to know. Thanks.

Regards

EDE

Re: R81.10 Delete and adding existing site - Checkpoint Endpoint Security to resolve VPN connectivit

PhoneBoy — Mon, 19 Jun 2023 13:44:20 GMT

How exactly are you adding the site to the client?
Specifically are you adding by FQDN or by IP?
If adding by FDQN, the IP is only resolved once when the site is added to the client.
If that IP changes, you’ll have to delete/re-add the site.
To fix this, see: https://support.checkpoint.com/results/sk/sk103440

Re: R81.10 Delete and adding existing site - Checkpoint Endpoint Security to resolve VPN connectivit

EDE1 — Tue, 20 Jun 2023 12:22:57 GMT

Hi,

Thank you for your responds.

Short answer is we just enter a IP address. Not using DNS at all.

Re: R81.10 Delete and adding existing site - Checkpoint Endpoint Security to resolve VPN connectivit

PhoneBoy — Tue, 20 Jun 2023 22:20:29 GMT

I suggest a TAC case: https://help.checkpoint.com

Re: R81.10 Delete and adding existing site - Checkpoint Endpoint Security to resolve VPN connectivit

Steven_Sultana — Wed, 09 Oct 2024 12:48:13 GMT

For future Googlers, a possible solution is related to the apply_resolving_mechanism_to_SR GuiDbEdit parameter:

https://support.checkpoint.com/results/sk/sk92716
https://support.checkpoint.com/results/sk/sk32229
https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_RemoteAccessVPN_AdminGuide/Content/Topics-VPNRG/VPN-Routing-Remote-Access.htm#Link_Selection_for_Remote_Clients