topic Re: PSK VPN not available for SMBs managed in SMP in Spark Firewall (SMB)

PSK VPN not available for SMBs managed in SMP

G_W_Albrecht — Thu, 12 Sep 2024 09:05:21 GMT

A customer has tried to create a VPN S2S using PSK for a VPN to one of his suppliers who only uses PSK. He found that:

he is unable to use PSK for VPN community in Plans (not selectable)
he is unable to use PSK for VPN in SMB WebGUI (option is greyed out)

I find this kind of strange as:

PSK VPN can be configured and used on locally managed SMBs
PSK VPN can be configured and used on centrally managed SMBs
If locally managed SMBs have PSK VPN configured and running already, PSK VPN tunnel will still work after being connected to SMP Cloud portal
SMBs connected to SMP Cloud portal can use PSK VPN when using SMBs CLI for configuration

There must have been some decision to disable this option, and TAC suggested to do a RFE for it - but what is the reason ?

Re: PSK VPN not available for SMBs managed in SMP

PhoneBoy — Thu, 12 Sep 2024 21:04:07 GMT

It could also be a bug.
Did you check with TAC?

Re: PSK VPN not available for SMBs managed in SMP

Lesley — Thu, 12 Sep 2024 21:14:35 GMT

Hmmm could this be the limitations that you describe?

https://support.checkpoint.com/results/sk/sk182234

Can we configure VPN with a third-party peer without using a certificate in Quantum Spark Management? In this way, we can also achieve integration with Quantum SASE?

Currently, this is not supported.

Re: PSK VPN not available for SMBs managed in SMP

PhoneBoy — Thu, 12 Sep 2024 22:09:33 GMT

I read it the same way.
Doesn't answer the question why, unfortunately.

Re: PSK VPN not available for SMBs managed in SMP

the_rock — Thu, 12 Sep 2024 23:19:02 GMT

That certainly answers the concern, though wish it said why its not supported.

Re: PSK VPN not available for SMBs managed in SMP

G_W_Albrecht — Fri, 13 Sep 2024 07:21:19 GMT

Yes - but as i wrote above, this is only a GUI limit ! If you define the PSK VPN before activationg cloud services or if you use CLI (Plan Script) for configuration, it does work as expected. And i want to know why we have that double GUI limit on PSK...

Re: PSK VPN not available for SMBs managed in SMP

G_W_Albrecht — Fri, 13 Sep 2024 07:22:13 GMT

Yes - R&D stated it is not supported, but i wait for the details after asking the same as above...

Re: PSK VPN not available for SMBs managed in SMP

G_W_Albrecht — Wed, 18 Sep 2024 11:04:25 GMT

Here is the answer:

After an internal discussion with the relevant teams, I was informed that implementing this feature requires complex development.

Hence, for this development to be on the roadmap, an RFE should be submitted.