IPsec VPN between fortigate(v5.6) and CheckPoint(R80.10)

[TAEKBOM_Kim]

Hi all,

I will configure site to site IPsec between VPN fortigate(v5.6) and CheckPoint(R80.10).
I wonder Is it possible?

No.1
=> Has anyone configured IPsec VPN between fortigate and CheckPoint(R80.10)?
  :

No.2
=> Can I get some resources? How to configure IPsec VPN between fortigate and CheckPoint(R80.10).

  :

Thank you!!

[Nüüül · Accepted solution]

Hi,

should work for the most cases...

more:

How to set up a Site-to-Site VPN with a 3rd-party remote gateway 

Daniel

[Timothy_Hall]

Fortinet boxes are quite picky about what Proxy-IDs/subnets they will accept in an IKE Phase 2 proposal sent by a Check Point.  You will almost certainly need to make the user.def modifications described in Scenario 1 of sk108600: VPN Site-to-Site with 3rd party.  Juniper and Sonicwall devices are similarly picky.

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

[Vincent_Bacher]

VPN between Checkpoint and FortiGate works fine.

In the past when configuring VPN between Checkpoint and Juniper ScreenOS gateways, i just configured Phase 2 using Proxy-ID local net 0.0.0.0/0.0.0.0 remote net 0.0.0.0/0.0.0.0 on the ScreenOS site and set Tunnel management to "One VPN tunnel per Gateway pair" to let the Checkpoint use the same proxy-ID. This is not the best choice but it was the easiest and it worked. Same on FortiGate gateways.