topic Re: Checkpoint 1570 Site to Site VPN with Sonicwall Not Working with Hostnames in Spark Firewall (SMB)

Checkpoint 1570 Site to Site VPN with Sonicwall Not Working with Hostnames

Nucleo — Mon, 24 Apr 2023 02:04:57 GMT

Dear All,

I am having issue with my Checkpoint SMB 1570 when creating site to site with Sonicwall.

My Sonicwall has DYNAMIC WAN. When i key in the IP address, the site to site will be active and no issue but when i change to hostname with Dynamic DNS the tunnel will change to not yet initialised and give me a weird IP address on the VPN tunnel page.

Let me know what i did wrong.

Thank you.

Re: Checkpoint 1570 Site to Site VPN with Sonicwall Not Working with Hostnames

the_rock — Mon, 24 Apr 2023 02:34:16 GMT

Hm...does not sound like thats something you can control on CP side. I had seen sonicwall GUI once in my life and it confused the bejesus out of me : - ). But, based on last thing you said, it makes sense why this happens, as CP would never recognize the new IP address once it changes.

Re: Checkpoint 1570 Site to Site VPN with Sonicwall Not Working with Hostnames

Nucleo — Mon, 24 Apr 2023 02:37:46 GMT

The issue is happening on CP 1570 side.

The sonicwall has no issue accepting hostname.

Re: Checkpoint 1570 Site to Site VPN with Sonicwall Not Working with Hostnames

the_rock — Mon, 24 Apr 2023 02:40:26 GMT

Maybe simple diagram would help. Sorry, but Im not understanding how issue can be on CP side. On Check Point, if it happens to use dynamic IP, then you set up S2S with certificate, otherwise it would never work. If its static IP, then you configure it as you normally would.

Re: Checkpoint 1570 Site to Site VPN with Sonicwall Not Working with Hostnames

Chris_Atkinson — Mon, 24 Apr 2023 02:40:45 GMT

What authentication method are you using for the VPN/tunnel?

Re: Checkpoint 1570 Site to Site VPN with Sonicwall Not Working with Hostnames

Nucleo — Mon, 24 Apr 2023 02:42:41 GMT

Im using Preshared key.

Re: Checkpoint 1570 Site to Site VPN with Sonicwall Not Working with Hostnames

the_rock — Mon, 24 Apr 2023 02:43:46 GMT

Thats never gonna work with dynamic IP.

Re: Checkpoint 1570 Site to Site VPN with Sonicwall Not Working with Hostnames

Nucleo — Mon, 24 Apr 2023 02:49:16 GMT

I see okay can share me any link that can help me setup the S2S with certificate with Sonicwall?

Re: Checkpoint 1570 Site to Site VPN with Sonicwall Not Working with Hostnames

Chris_Atkinson — Mon, 24 Apr 2023 02:49:29 GMT

Per sk167473:

Re: Checkpoint 1570 Site to Site VPN with Sonicwall Not Working with Hostnames

the_rock — Mon, 24 Apr 2023 02:57:47 GMT

In my humble opinion, WAY BETTER than any official guide you will find.

Hope it helps.

Andy

https://community.checkpoint.com/t5/Security-Gateways/HowTo-Set-Up-Certificate-Based-VPNs-with-Check-Point-Appliances/td-p/73299

Re: Checkpoint 1570 Site to Site VPN with Sonicwall Not Working with Hostnames

PhoneBoy — Mon, 24 Apr 2023 19:54:36 GMT

Did you configure things similar to: https://support.checkpoint.com/results/sk/sk112213?
I realize the remote end is Sonicwall, but the settings on your end should be similar.
Otherwise, please provide screenshots of precisely what you've configured (sensitive details redacted).

Re: Checkpoint 1570 Site to Site VPN with Sonicwall Not Working with Hostnames

the_rock — Mon, 24 Apr 2023 20:53:39 GMT

Isnt this same thing you posted yesterday?

https://community.checkpoint.com/t5/General-Topics/Checkpoint-1570-Site-to-Site-VPN-with-Sonicwall-Not-Working-with/m-p/178862#M29807

By the way, you need to follow the guide to configure this with the cert, as per link Chris and I gave you. Also, link @PhoneBoy provided is literally same screenshots, was probably written of the community link. Either way, thats what you HAVE TO follow to make this work, otherwise, it will never work with PSK.

Andy

Re: Checkpoint 1570 Site to Site VPN with Sonicwall Not Working with Hostnames

PhoneBoy — Tue, 25 Apr 2023 01:17:15 GMT

Yes it was and I merged the threads. 🙂

Re: Checkpoint 1570 Site to Site VPN with Sonicwall Not Working with Hostnames

G_W_Albrecht — Thu, 05 Sep 2024 14:14:02 GMT

sk167473 is not available anymore - or has it been replaced by another SK ?

kind regards,

Guenther Albrecht

CCSE CCTE CCME CCSM Elite SMB Specialist

Arrow ECS GmbH A-1100 Wien, Wienerbergstrasse 11

Tel: +43 1 370 94 40 325 Fax: +43 1 370 94 40-333

Re: Checkpoint 1570 Site to Site VPN with Sonicwall Not Working with Hostnames

the_rock — Thu, 05 Sep 2024 14:27:17 GMT

Comes up fine for me.

Andy

https://support.checkpoint.com/results/sk/sk117536

Re: Checkpoint 1570 Site to Site VPN with Sonicwall Not Working with Hostnames

G_W_Albrecht — Thu, 05 Sep 2024 14:53:59 GMT

I see - i can not find it using search, but https://support.checkpoint.com/results/sk/sk167473 works - strange, i gave feedback to it...

Re: Checkpoint 1570 Site to Site VPN with Sonicwall Not Working with Hostnames

the_rock — Thu, 05 Sep 2024 15:09:08 GMT

Not sure what to tell you mate...for me, works no matter what sk I search.

Andy

Re: Checkpoint 1570 Site to Site VPN with Sonicwall Not Working with Hostnames

G_W_Albrecht — Mon, 09 Sep 2024 07:25:13 GMT

NOw it does that also for me again - strange issue...

Re: Checkpoint 1570 Site to Site VPN with Sonicwall Not Working with Hostnames

the_rock — Mon, 09 Sep 2024 12:23:29 GMT

Just tested, fine for me.

Andy

Re: Checkpoint 1570 Site to Site VPN with Sonicwall Not Working with Hostnames

PhoneBoy — Mon, 09 Sep 2024 19:48:57 GMT

Seems like we had some issues with searches in general with SupportCenter over the last couple days.
I believe these have been resolved now.