VPN Certificate Upgrade - VPN Disconnect?

[seanmc12]

Will Checkpoint VPN disconnect if I upgrade the Checkpoint VPN Certificate? I need to upgrade our VPN Cert, but do not want to disconnect any active sessions. I think the VPN clients will stay connect and renew once they disconnect and reconnect. Can anyone confirm. Not finding any verbiage in the documentation on that.

[G_W_Albrecht]

Are you talking about S2S or RA VPN ? RA VPN is the issue as clients must manually accept the new fingerprint...

[JozkoMrkvicka · Accepted solution]

This is not true. Only in case InternalCA cert (on management) is renewed, end users will need to accept new fingerprint.

If only VPN certificate (inside RA VPN gateway object) is about to be renewed, it will not disconnect any users and no need to accept any certificate.

See sk182070 for automatic IKE certificate renewal.

[seanmc12]

Thank you.