VPN with 3rdParty DAIP Gateway

[Prabulingam_N1]

Dear Team,

I have run into below situation. Anyone had come across - need your suggestion.

Site-to-Site VPN between CheckPoint and SonicWall

CheckPoint has static External IP. But SonicWall is DAIP - so they have DynDNS.

When we configure Interoperable object in CheckPoint Dashboard - it is mandatory to tag the Certificate received from SonicWall or not.

Because, without this Matching Criteria in Interoperable Object_IPSecVPN Tab - unable to configure their object.

When discussed with SonicWall Team they said - they will not give any certificate - use only DynDNS with Aggressive mode with IKeV2.

Anyone have successfully established 3rdParty DAIP VPN with CheckPoint?

Regards, N.Prabulingam

[Vladimir · Accepted solution]

Please see this thread: https://community.checkpoint.com/thread/5819-site-to-site-vpn-with-3rd-party-daip-gateway 

[Prabulingam_N1]

Dear Vladimir,

Thanks for the link -I had gone through this as well.

Is there any of Checkmates had accomplished in this scenario with CheckPoint and SonicWall or other 3rdParty DAIP?

Regards, Prabulingam.N

[Prabulingam_N1]

Dear All,

Have anyone successfully configured VPN using Certificates between CheckPoint and other DAIP vendor?

Also in my scenario, since SonicWall unable to provide their certificate - we CheckPoint ICA generated Certificate using CSR from SonicWall.

Can CheckPoint ICA act as CA for issuing Certificate to 3rd Party Vendors?

Regards, Prabu

[Manoj_Pallapoth]

Hi,
I need help on the same use case. Do we support site to site with 3rd party DAIP. Please respond.

[Manoj_Pallapoth]

No, not successful in my attempts

[Rade_Bebek]

@Prabulingam_N1 @Manoj_Pallapoth 

Any information about connect 3rdParty DAIP with success? 

[Matthias_Haas]

Cannot establish VPN tunnel with 3rd Party DAIP using Pre-shared Secret 

[Rade_Bebek]

Are you success connect VPN with certificate and which certificate used? Checkpoint internal or Mikrotik(in my case)?

[Prabulingam_N1]

Nope, I couldnot make this