Can't Ping gateway IP of End VPN IP Address

pyiephyohtay — Tue, 18 Apr 2023 04:16:11 GMT

Dear All,

Currently, I'm facing with the Ping and cannot access of another side Public IP address.

I have the IPsec configuration between Checkpoint Quantum 1550 Appliance to Palo alto Firewall 220. For the VPN tunnel and connection is working fine between both side. The problem is under of checkpoint office internet users are cannot ping and connect to another side of public IP address, which is create for using cisco AnyConnect VPN 202.80.78.168:444 for other purpose. These users are need to connect that 202.80.78.168:444 but can't access.

If we use the 1.1.1.1 cloud flare VPN software in users client pc of under checkpoint internet, they can access ping that public ip address and can access AnyConnect VPN with 202.80.78.168:444. without any other issues.

So, how can i solve my issues our client users want to access 202.80.78.168:444 without 1.1.1.1 vpn using.

Please kindly help investigate my issues, many thanks.

Best Regards,

Pyie Phyo Htay.

Re: Can't Ping gateway IP of End VPN IP Address

PhoneBoy — Thu, 20 Apr 2023 20:48:16 GMT

Just to be clear, the IP address you're having trouble with is configured as a VPN peer in the Quantum Spark appliance, correct?
The Check Point gateway expects to send only encrypted traffic to the remote VPN IP address (i.e. it's included in the encryption domain).
If the remote end isn't configured appropriately, the traffic will fail as it is doing.
That's scenario 3 here: https://support.checkpoint.com/results/sk/sk108600

If your SMB is not managed externally with a Smart-1, you can still apply the changes mentioned in this SK in expert mode.
For the change to take effect, however, you will either need to reboot OR execute the command fw_configload and wait a few minutes.

If that doesn't work, you can try and debug the VPN per: https://support.checkpoint.com/results/sk/sk62482

topic Re: Can't Ping gateway IP of End VPN IP Address in Spark Firewall (SMB)

Can't Ping gateway IP of End VPN IP Address

Re: Can't Ping gateway IP of End VPN IP Address