Route Traffic

[handiansudianto]

I have 2 different ISP connected to the checkpoint, and want to know how to route traffic from several group. So for example i want to route traffic from group-1 to ISP-1 and group-2 to ISP-2.

[Chris_Atkinson]

One option depending on the particulars might be:

sk100500 - Policy-Based Routing (PBR) on Gaia OS

[Bob_Zimmerman]

One important note: PBR does not apply to traffic from the firewall itself. Traffic the firewall sends (e.g, connecting out to Check Point for IPS/AV/URL Filtering data) would take only the normal routing table, so would only take one of the ISPs.

Another option might be VSX. It allows you to set up multiple routing tables on the firewall (like Cisco VRF, Fortinet vdom, Palo Alto sys). Traffic routed to one firewall interface hits one routing table. Traffic routed to a different interface hits a different routing table. Each firewall context would then handle a single ISP.

[the_rock]

I agree with Chris 100%...PBR is most likely your answer here.