IPSEC VPN Migration

[SriNarasimha005]

Hi All

We are preparing to upgrade the current EOL Checkpoint firewalls to the latest hardware series, which has IPSEC VPN enabled. We will not be altering the public IP from our side, as this will be a direct replacement with the existing configuration.

Will the inclusion of the new Cluster in the VPN community be sufficient, or is it necessary to re-enter the PSK?

Furthermore, please inform me if there are any additional steps required to ensure the successful establishment of the VPN tunnel.

Thank you.

[Alex- · Accepted solution]

The PSK resides in the VPN community for external interoperable objects, so adding your new cluster in the community should be sufficient.

[SriNarasimha005]

Hi @Alex- 

Furthermore, given that the VPN community is located within the CMA, duplicating the current policy package and associating it with the new firewalls, I believe it does not necessitate re-entering the PSK.

Is my understanding correct?