CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


First, I hope you're all well and staying safe.
Second, I want to give a "heads up" that you should see more activity here shortly, and maybe a few cosmetic changes.
I'll post more details to the "Announcements" forum soon, so be on the lookout. -E

 

Results 1 to 3 of 3

Thread: Dual ISP in Active/Active forwarding traffic based on protocols

  1. #1
    Join Date
    2014-10-27
    Posts
    150
    Rep Power
    9

    Default Dual ISP in Active/Active forwarding traffic based on protocols

    Hello Experts,

    I am trying to achieve a scenario with Dual ISP in Active/Active forwarding traffic based on protocols. for example.

    ISP Link one forwards all http and https traffic, whereas
    ISP Link two forwards the rest of the traffic and handles VPN

    Is this possible by any chance, i am basically migrating from a watchguard firewall which is doing the baove.

    Thanks
    Bhav

  2. #2
    Join Date
    2007-06-04
    Posts
    3,314
    Rep Power
    20

    Default Re: Dual ISP in Active/Active forwarding traffic based on protocols

    You have my sympathy I desperately always try and avoid ISP Redundancy.

    https://supportcenter.checkpoint.com...duct=ClusterXL,

    Is the SK article you want.

    Basically you can configure that specific services will go over the Primary ISP line, rest of the services will be load balanced across both lines, unless you need to Static NAT the traffic in which case outbound will go across the Primary Link anyway unless that fails.

    Is the nearest that you will get to what you want

    For VPN then will need to configure the Link Selection so that uses the other line IP as Primary and place routes on the Gateway to route the traffic via the other ISP line.

  3. #3
    Join Date
    2014-10-27
    Posts
    150
    Rep Power
    9

    Default Re: Dual ISP in Active/Active forwarding traffic based on protocols

    Thanks Mcnallym

    I will use the sk and post my views back here when i can

    cheers
    Bhav

Similar Threads

  1. Can I configure Active-Active (Load Sharing) + Management HA on two UTM-1 appliances?
    By aberfoyle in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 2
    Last Post: 2011-09-21, 23:00
  2. Replies: 0
    Last Post: 2011-09-20, 22:09
  3. Replies: 3
    Last Post: 2011-07-06, 01:12
  4. SPLAT NGx R65 2.4 kernel Active/Active Multicast mode
    By cciesec2006 in forum Check Point SecurePlatform (SPLAT)
    Replies: 0
    Last Post: 2008-09-17, 15:03
  5. Urgent: ClusterXL Active/Active Unicast mode and icmp issue
    By cciesec2006 in forum Check Point SecurePlatform (SPLAT)
    Replies: 14
    Last Post: 2008-09-04, 13:51

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •