IPSEC VPN Migration

[SriNarasimha005]

Hi All

We are preparing to upgrade the current EOL Checkpoint firewalls to the latest hardware series, which has IPSEC VPN enabled. We will not be altering the public IP from our side, as this will be a direct replacement with the existing configuration.

Will the inclusion of the new Cluster in the VPN community be sufficient, or is it necessary to re-enter the PSK?

Furthermore, please inform me if there are any additional steps required to ensure the successful establishment of the VPN tunnel.

Thank you.

[Alex-]

The PSK resides in the VPN community for external interoperable objects, so adding your new cluster in the community should be sufficient.

[SriNarasimha005]

Hi @Alex- 

Many thanks for your reply. 

Just adding the cluster and installing the policy would work or should I need to reset the tunnel from the new firewall for it to take effect?