RAVPN & MEP Questions

[Fabz]

Hi Checkmates,

We are building resilience RAVPN with Check Point, having 3 VPN Concentrator in the 3 different area (silo).

Our goal is create an active-active RAVPN from 3 area, i think CP has this feature in MEP.

My questions are:

1. Since we will build 1 domain for Gateway VPN Address, do i need to re-setup all the RAVPN configuration?
2. Is MEP supports if all the 3 gateway managed by different Smart-1 appliance?

Also do checkpoint RAVPN already supports for NAC integration with Cisco ISE and Forscout?

Thankyou!

[PhoneBoy]

I don't believe you need to re-setup anything.
Each management domain (because of being managed by different Smart-1) will require it's own site and you cannot automatically fail over between them.
Identity Awareness should be able to make use of Cisco ISE informatikon (which should also work with Remote Access).
Not sure on Forescout.