Dual ISP in Active/Active forwarding traffic based on protocols

[bhavinjbhatt]

Hello Experts,

I am trying to achieve a scenario with Dual ISP in Active/Active forwarding traffic based on protocols. for example.

ISP Link one forwards all http and https traffic, whereas
ISP Link two forwards the rest of the traffic and handles VPN

Is this possible by any chance, i am basically migrating from a watchguard firewall which is doing the baove.

Thanks
Bhav

[mcnallym]

You have my sympathy I desperately always try and avoid ISP Redundancy.

https://supportcenter.checkpoint.com...duct=ClusterXL,

Is the SK article you want.

Basically you can configure that specific services will go over the Primary ISP line, rest of the services will be load balanced across both lines, unless you need to Static NAT the traffic in which case outbound will go across the Primary Link anyway unless that fails.

Is the nearest that you will get to what you want

For VPN then will need to configure the Link Selection so that uses the other line IP as Primary and place routes on the Gateway to route the traffic via the other ISP line.

[bhavinjbhatt]

Thanks Mcnallym

I will use the sk and post my views back here when i can

cheers
Bhav