ISP load sharing with SD-WAN not working

[TRajkumar]

Hi Everyone 

  One of my customer have checkpoint SD-WAN with 3000 series firewalls. We face issue on ISP failover, If primary ISP goes down ISP2 not taking the connections and due to this RA-VPN also gets impact. We raised a TAC case too but no luck. 

Any one facing this type of issue?  If any solution for this issue, Kindly suggest me the solution.

Steps taken by our side.

1. Configured the Monitoring on default routes. 

2. Tried the latest hotfix.

3. Planed to upgrade R82. But customer not ready to go with R82. 

Best Regards

Rajkumar T

[Chris_Atkinson]

Please share some additional details, for example are you using dynmanic routing either with the ISP or VPNs etc...

Investigating with TAC is the correct path, escalate with them and your local SE / account team as required.

[TRajkumar]

Hi Chris

 There is no dynamic routing on network, We use only Static routes.

 Yes we looped SE and Account manager too. Its been more than 50 days. 

 Also i suggested customer to upgrade R82, But they are not ready to upgrade it.

Thanks

Rajkumar T

[AmirArama]

Sounds like a configuration issue.

*RA-VPN is not affected by SDWAN, but by regular routing.

Please DM me with the SR number.

[the_rock]

Hey Rajkumar,

When this fails, what does say command ip r g 8.8.8.8 look like compared to when it does work?

Andy

[TRajkumar]

hi rock

  When working scenario it get my Primary ISP route. But when non working time there is no route taken.

BR

Rajkumar T

[the_rock]

Are you able to send output of command route from expert mode? Just blur out any sensitive data.

Andy