ISP load balancing

[Sangisha_Daka_K]

Hello everyone,

How do i add another ISP link on checkpoint firewall so we can have load balancing just in case the first ISP link goes 

down the second can automatically pick up. We are using R80.10 Gaia with one server manager and one 5000 appliance firewall .Any guidance on how to do the  configurations step by step.

Thanks in advance.

[Vladimir]

Should't be much different in R80+:

https://downloads.checkpoint.com/fileserver/SOURCE/direct/ID/12314/FILE/How_To_Configure_ISP_Redunda... 

[Sangisha_Daka_K]

Thanks  Vladimir for the documentation however have one more question there is this part which says when configuring ISP redundancy note that existing VPN settings will be override.does it mean that current VPNs will no longer work once i add another ISP link because currently we have 10 VPN remote sites. whats your thought on this one? 

[G_W_Albrecht]

This is only difficult with 3rd party VPN, see sk116772: ISP Redundancy "Apply settings for VPN traffic" is not working with 3rd party vendors. Other documentation includes sk23630: Advanced configuration options for ISP Redundancy and sk61692: Troubleshooting ISP Redundancy.

[Timothy_Hall]

Also keep in mind that if you configure ISP Redundancy in Load Sharing mode (i.e. Active/Active) traffic cannot be accelerated at all by SecureXL (both accept templates and packet/throughput acceleration) and a large amount of traffic will end up in F2F/slowpath.  Using Primary/Backup mode with ISP Redundancy will not cause this to occur.

--
"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com

[_Lib_]

Hello Timothy,

Is it still the case today in most recent versions ?