PSK VPN not available for SMBs managed in SMP

[G_W_Albrecht]

A customer has tried to create a VPN S2S using PSK for a VPN to one of his suppliers who only uses PSK. He found that:

• he is unable to use PSK for VPN community in Plans (not selectable)
• he is unable to use PSK for VPN in SMB WebGUI (option is greyed out)

I find this kind of strange as:

• PSK VPN can be configured and used on locally managed SMBs
• PSK VPN can be configured and used on centrally managed SMBs
• If locally managed SMBs have PSK VPN configured and running already, PSK VPN tunnel will still work after being connected to SMP Cloud portal
• SMBs connected to SMP Cloud portal can use PSK VPN when using SMBs CLI for configuration

There must have been some decision to disable this option, and TAC suggested to do a RFE for it - but what is the reason ?

[PhoneBoy]

It could also be a bug.
Did you check with TAC?

[G_W_Albrecht]

Yes - R&D stated it is not supported, but i wait for the details after asking the same as above...

[Lesley]

Hmmm could this be the limitations that you describe?

https://support.checkpoint.com/results/sk/sk182234

• Can we configure VPN with a third-party peer without using a certificate in Quantum Spark Management...
  

  Currently, this is not supported.

[PhoneBoy]

I read it the same way.
Doesn't answer the question why, unfortunately.

[G_W_Albrecht]

Here is the answer:

After an internal discussion with the relevant teams, I was informed that implementing this feature requires complex development.

Hence, for this development to be on the roadmap, an RFE should be submitted.

[the_rock]

That certainly answers the concern, though wish it said why its not supported.

[G_W_Albrecht]

Yes - but as i wrote above, this is only a GUI limit ! If you define the PSK VPN before activationg cloud services or if you use CLI (Plan Script) for configuration, it does work as expected. And i want to know why we have that double GUI limit on PSK...