Checkpoint device does not establish VPN tunnel

[lucascaetano9]

Hello all,

I am getting issues when trying to configure VPN tunnels in my R77.20. I have tried to connect to ASA, FORTINET and Pfsense as well. As I dont know to much regarding the log of this kind of feature, I would like your help on some advice about this.

Are there some directory or folder that I can see evidences or issue of the connection? 

Obs: I dont have a blade license to check in monitor and another tools in smartcenter.

[PhoneBoy · Accepted solution]

SmartView Tracker and/or SmartLog should show evidence of this.
See also: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[lucascaetano9]

The issue Advanced Access is required is being shown even I am logged with my costumer credentials, but anyway, thanks for your recomendation!

[HeikoAnkenbrand · Accepted solution]

Tip:

- use IKEv1

- use lower DH groups for example  5

- use main mode

- check first with PSK

- check same phase 1 and phase 2 settings

- check supernet issues

- check encryption domains on both sides 

- Update your firewall to a supported version R80.20 with vpn multicore support. R77.20 is out of support😀.

- use „vpn tu“ to check phase 1 and phase 2 

- enable the vpn debug and use the ikeview tool to debug vpn issues

[HeikoAnkenbrand]

See more -> What is the IKEView utility?

sk30994

[HeikoAnkenbrand]

Or see this SK:

VPN Site-to-Site with 3rd party