How to Check Point maintaining connection for GRE traffic

[mahesh027cse1]

Hi,

Can anyone please help to understand how Checkpoint firewall,  GRE through traffic handling.

I am getting an issue.  GRE is configured on both end route and in between i have CheckPoint firewall.When a fail-over (primary to secondary) occurs, GRE is stop working and then i need to request with network person to bounce the Router GRE terminated physical port. I need to understand CheckPoint GRE through traffic handling, and how it maintain in connection table, i tried to find documents but no luck.

Route --->CheckPoint ---> Router  

[Chris_Atkinson]

Is the connection subject to NAT and does the issue occur only on Failover or also during policy installation?

Service object:

[mahesh027cse1]

There is no NAT for GRE traffic. But when we did fail-over (Primary to secondary), We need to reset the GRE interface to establish connection.  Can you please help to understand how Check Point maintaining state-full fail-over for GRE through traffic.  

"Synchronize connection if State Synchronization is enabled on the cluster" is by default enabled for the GRE object.