S2S and C2S VPN tunnels on 28000 FW

[AlvinCheung]

Hello everyone,

Please kindly advise how many site-to-site and client-to-site VPN tunnels are supported on the Check Point 28000 firewall.

Thanks a lot!

Alvin

[Peter_Lyndley]

more than you could ever configure probably 😉

[the_rock]

lol...thats probably true 🙂

[Timothy_Hall]

Generally the only limitation for number of VPN tunnels is available memory, however on the Optimizations screen of the gateway/cluster object there is a soft limit of 1,000 concurrent IKE negotiations and 10,000 total tunnels that can be potentially increased.  I've never needed to do so, and if you are bumping into either of these limits there is something seriously wrong with your VPN configuration, probably involving VPN Tunnel Sharing being set to "pair of hosts" and hundreds or even thousands of different hosts trying to communicate with each other through a VPN.

[the_rock]

Check out below:

https://community.checkpoint.com/t5/Security-Gateways/VPN-Tunnels-Capacity/m-p/6914

Personally, if you really need this info, you may wish to contact your local Sales rep.