This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
ABOUT CHECKMATES CYBER SECURITY COMMUNITY & FAQ
Create a Post
Help
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Are you a member of CheckMates?

×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
Venue2185
Explorer
Thursday

Interoperability Device Object for Dynamic IP

VPN setup where Check Point is the Hub and multiple FortiGate firewalls are the Spokes.

Topology:

  • Hub: Check Point Gateway (Static Public IP)
  • Spokes: FortiGate Firewalls (Dynamic Public IP)
  • VPN Type: Route-Based VPN (VTI) with BGP
  • Each FortiGate spoke receives a dynamic public IP from its ISP.

I would like to know whether it is necessary to create an Interoperable Device object with a dynamic IP address for each FortiGate spoke in Check Point.

Since the spoke gateways do not have static public IP addresses, I am unsure about the recommended configuration on the Check Point side.

Has anyone deployed a similar Hub-and-Spoke environment with Check Point as the Hub and FortiGate devices using dynamic public IPs?

If so, could you please share:
Configure the Interoperable Device object with a Dynamic IP on the Check Point side, is Certificate Authentication (CA).

 

0 Kudos
0 Replies

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

View All ≫
Upcoming Events

    CheckMates Events