WireGuard

[Wilson_Wiley]

I was curious to find out if anyone knows if Check Point has looked into implementing WireGuard? It seems really promising and could be a huge benefit to customers with a lot of VPNs. From what I've read, there's a lot of advantages to WireGuard over traditional IPSec VPNs: reduced code attack surface, simpler setup, stronger algorithms, and faster connections.

https://www.wireguard.com/

https://arstechnica.com/gadgets/2018/08/wireguard-vpn-review-fast-connections-amaze-but-windows-supp...

Thanks!

[PhoneBoy]

It's interesting tech for sure, but it still seems fairly nascent.
I suspect wider adoption will be needed before we consider adding it to the product.

[Ole_Jakobsen]

Some time have passed now, and adoption have increased notably, some very be companies are running trials where they seek to replace both Cisco and Check Point VPN.

Any news on Check Point's implementing support for WireGuard?

[PhoneBoy]

I am not aware of any specific plans to implement WireGuard.
If it is a requirement for you, I recommend engaging with your local Check Point office.

[juju42]

Mikrotik and AVM did it. I Cant wait for Checkpoint to do so.  🙂 

[baimagambetov]

Hi all!
Does anyone know if WireGuard technology has already been implemented?

[_Val_]

AFAIK, the answer is still no. If you need it, please open an RFE with your local Check Point office representative.

[Martin_Valenta]

since Harmony SASE support Wireguard, how about have Wireguard support on Gaia OS Firewalls?

[PhoneBoy]

I believe this is under consideration as part of a larger effort to unify elements of Harmony SASE and Endpoint.

[reldred]

Not sure how far those discussions got but this would be a terrific capability to add; Wireguard has a lot of vendor support now, even Unifi added it to their appliances (Easy for them, granted, they're all Debian Linux under the hood). The protocol is very robust, very fast, and survivable with clients behind ugly CGNAT setups such as mobile operators and Starlink, etc. Very good option for site to site tunnels where satellite sites are on less than ideal carriage.

[PhoneBoy]

Considering we're using Wireguard in Harmony SASE, I think we understand the value of it 🙂
I've not heard anything about integrating it into the Quantum Security Gateway as of yet, which I imagine is not a trivial task.

[Robin]

This would be nice...