Routing of with 2 ISPs

[Christian_Opitz]

Hello,

we want to replace a Sophos Firewall-Cluster through a CP Cluster.

2 independent ISPs (without BGP) are connected. The first ISP is for the main outgoing traffic (default GW) and external servers. Some other servers are reachable through the other ISP from outside. All server must be reachable from the complete Internet.

Sophos remembers the incoming interface and routing so the answer packet is forwarded automatically the same way.

Check Point uses his routing table also for replys but that will be result to wrong routing of the answer packet for incoming internet connections from the second ISP.

Is there a way to realize this with Check Point without PBR, VSX or a source hide-nat on a device before?

With PBR we will get some limitations (like https Inspection). But these limitation will we only for Traffic with PBR and not going over the default Gateway correct?

[PhoneBoy]

You may also want to review the documentation for your specific version on a feature called ISP Redundancy.
Not 100% sure it will be a better solution than PBR in this case, which is your other likely option.
I believe the limitations apply to traffic subject to PBR.