topic Re: VPN Client Multiple Interfaces in SASE and Remote Access

VPN Client Multiple Interfaces

Roy_Smith — Wed, 18 May 2022 16:40:52 GMT

I am investigating some issues our users are having with Remote Access VPN. In my investigation, I came across this post - https://community.checkpoint.com/t5/Remote-Access-VPN/Endpoint-VPN-users-facing-extreme-slowness/m-p/100636

When I look at our gateways to confirm if the option "Support connectivity enhancement for gateways with multiple external interfaces" is enabled or not, I do not see it. The option is not there. I do remember seeing it in the past but cannot remember what was set.

Is this an option that has been removed in R81.10? Or has it moved somewhere else? Or is it not relevant now?

Any help on this is appreciated.

Many Thanks
Roy

Re: VPN Client Multiple Interfaces

Juan_ — Thu, 04 Aug 2022 16:05:12 GMT

Hi There,

Yes, looks like it doesn't exist any more under R81.10 manager.

@PhoneBoy, Any insights on this?

Thanks

Re: VPN Client Multiple Interfaces

PhoneBoy — Thu, 04 Aug 2022 23:46:36 GMT

It's documented here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk30950&partition=Basic&product=Quantum
However, I too am not finding it there in R81.10.
A TAC case might be in order.

Re: VPN Client Multiple Interfaces

Roy_Smith — Fri, 05 Aug 2022 09:49:21 GMT

I raised a call and got the following response:

"The "Support connectivity enhancement for gateways with multiple external interfaces" option is integrated into the newer versions - Since R81.
Therefore, as this functionality is built-in since R81, this option is not appearing anymore. (It's permanently enabled)"

We found the cause of our VPN issues, which were caused by something else.

Re: VPN Client Multiple Interfaces

Zolo — Wed, 11 Jan 2023 12:38:10 GMT

Hello Roy,

Could you share what caused the slowness problem in your environment?

Re: VPN Client Multiple Interfaces

Roy_Smith — Mon, 16 Jan 2023 17:36:33 GMT

Hi Zolo

The issue was tracked down to CoreXL and not enough CPU cores assigned to the VS. We enabled dynamic_balancing and all our VPN gateways are running fine at present