Link Selection Probing for Remote Access VPN - sk113617

[the_rock]

Hey guys,

I really want to confirm something 100%. Above sk in the title, we understand and TAC told us this before that automatic failover with ISP redundancy is not supported with remote access VPN, but, to be absolutely sure, does this sk imply that isp redundancy is NOT supported with remote access vpn period, or just link selection part is not supported?

Thanks!

[PhoneBoy]

My understanding is that there is no mechanism on the Remote Access client to know that the gateway has failed over to the secondary ISP.
Which effectively means: Remote Access won't work when the gateway is failed over to the secondary ISP. 
There is an internal SK that talks about a not-recommended workaround to this which has some limitations.

I suspect proper support for this would require an RFE.

[the_rock]

Thanks D...we actually do know that, but here is what I need to confirm. As I mentioned in my post, customer understands that automatic failover does not work and its not supported with isp redundancy for RA, BUT, does sk imply that isp edundancy is not supported with RA period, OR just the link selection part is not supported?

Thats actually what I wanted to confirm.

Cheers,

Andy

[PhoneBoy · Accepted solution]

The way I interpret it, absent a clear SK to the contrary, is just the Link Selection part that's not supported. 

[the_rock]

Thanks as always D, appreciated! Thats exactly how I understood it as well...cheers.

[Steven_Sultana]

The referenced SK seems ... gone.

Does this mean that RAVPN client can now recognize that ISP_A is down and automatically attempts to connect to ISP_B? Is there some configuration needed to achieve this?

[PhoneBoy]

This might help (with a DDNS setup): https://support.checkpoint.com/results/sk/sk103440