- Products
- Learn
- Local User Groups
- Partners
- More
MVP 2026: Submissions
Are Now Open!
What's New in R82.10?
10 December @ 5pm CET / 11am ET
Improve Your Security Posture with
Threat Prevention and Policy Insights
Overlap in Security Validation
Help us to understand your needs better
CheckMates Go:
Maestro Madness
I want to figure out the rank-to-cost ratio in Check Point routing.
We can adjust Rank between static routes, dynamic protocols, but we don't see a cost adjustment for routes. We know that rank and cost affect the order in which packets are sent through the routing table.We tried to set the same rank between the static route and the rank that comes in via ospf. In this case traffic went via ospf route, cost of ospf was lower than that of static route.
When we output show route, we see cost, but we don't see rank. How do these concepts relate to Check Point?
Please provide a specific example.
We are preparing an example. Maybe you can tell us how cost and rank are related in Check Point?
Nothing special with Check Point. Lower cost should be the preferable route. Not sure what you mean by "rank" though.
Please also refer to the advanced routing guide for your version, for example: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SecurityGateway_Guide/Conten...
The "Protocol Rank" concept is described here:
And what about the priority in relation to Ipsec VPN domain, what is the priority of networks (routes) in the VPN domain?
Domain-Based VPN traffic (as opposed to Route/Based VPN with VTIs) always takes priority over other routes due to VPN’s position in the kernel.
which is more priority than a static route or a VPN domain?
Pretty sure a VPN Domain has higher priority.
I always thought domain based tunnel has priority over route based one, but then static route would have precedence over VPN domain.
Andy
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 22 | |
| 21 | |
| 8 | |
| 7 | |
| 5 | |
| 5 | |
| 4 | |
| 3 | |
| 2 | |
| 2 |
Thu 04 Dec 2025 @ 03:00 PM (CET)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - EMEAThu 04 Dec 2025 @ 02:00 PM (EST)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - AmericasThu 04 Dec 2025 @ 03:00 PM (CET)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - EMEAThu 04 Dec 2025 @ 02:00 PM (EST)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - AmericasFri 12 Dec 2025 @ 10:00 AM (CET)
Check Mates Live Netherlands: #41 AI & Multi Context ProtocolAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY