Hi everyone,
I am a long time Checkpoint users but Site-to-Site VPN is new to me and need your help.
I have a clusterXL running on model Quantum Spark 1595 manage several networks and one the network is called DMZ network housing AntiVirus server, Windows patch server, and SolarWinds monitoring system.
The DMZ network address is 10.80.192.0/24.
Security Management Server is in DMZ network (10.80.192.107)
ClusterXL virtual IP is 10.80.192.1 (FWA=10.80.192.2, FWB=10.80.192.3)
The Gateway 1595 still have two more interfaces available.
----------
I had another private network (10.10.10.0/24) connect to Ethernet1 interface on Checkpoint Gateway model 3600.
The goal is setting up private network to ClusterXL and provide access rules to use resources in DMZ network such as AntiVirus, Patch Update, and network monitoring.
Currently, I setup Ethernet2 interface on Gateway 3600 to connect directly to DMZ Cisco switch (10.80.192.0/24), so the Security Management server (10.80.192.107) can manage GW 3600, and by doing this I can create access rule for Private Network (10.10.10.0/24) to use all resources in DMZ network. Here the problem, our management want GW3600 interface to ClusterXL 1595 to allow 10.10.10.0/24 network access to DMZ resources.
I am new to Site-to-Site VPN, and our GW3600 and ClusterXL gateway pair 1595 mount in the same cabinet and very close together, can it be done? how to physically connect a single GW3600 to ClusterXL dual GW1595? and how to setup VPN for it to communicate? Do I need to use two interfaces on GW3600 for it to work?
Thank in advance for your help,
