Internet access via VPN to 3rd party firewall

[Christian_Koehl]

Dear Checkmates,

I need to build a VPN  between an internat Check Point Firewall R80.30 and a 3rd party firewall located on the internet edge.

This 3rd party firewall is the main internet access point.

Any hints, especially regarding the Enc-Dom and "route-based VPN vs policy based VPN".

Thanks alot and best regards,

Christian

[PhoneBoy]

Looking at this diagram, it's not clear exactly what the purpose of this VPN is.
Exactly what traffic are you trying to encrypt?

[Christian_Koehl]

It is an internal network area for external users and there system (systems not owned by the customer) -- like a "guest network". The guests should get "direct" internet access and there communication has to be tunneled through the customer network.

[PhoneBoy · Accepted solution]

You probably need to use a route-based VPN since you're basically using an encryption domain of "everything" in this case.
Again, exactly how this would be set up depends on the third party endpoint in question.