Quantum SPARK 1500 - Configuring the Site to Site VPN Blade

Configuring the Site to Site VPN Blade
R81.10.X Quantum Spark 1500, 1600, 1800, 1900, 2000 Appliances Locally Managed Administration Guide|337
Configuring the Site to Site VPN Blade
In the VPN > Site to Site Blade Control page you can activate the appliance's ability to create
VPN tunnels with remote sites. Site to Site VPN can connect two networks separated by the
Internet through a secure encrypted VPN tunnel. This allows for seamless secure interaction
between the two networks within the same organization even though they are physically
distant from each other.
On this page you can activate the blade to allow site to site connectivity. You can view how
many sites are already defined and configure basic access policy from the remote sites into
the specific network accessible by this gateway.
The remote site can be accessible through another Check Point appliance (recommended) or
a 3rd party VPN solution.
n
ZScaler
n
strongSwan (authentication based on X.509 certificates)
Note - In the R81.10.X releases, this feature is available starting from the
R81.10.05 version.
Once defined, access to the remote site is determined by the incoming/internal/VPN traffic
Rule Base as seen in the Access Policy > Firewall Policy page. This is due to the fact that the
remote site's encryption domain is considered part of the organization even though traffic to it
is technically outgoing to the Internet (since it is now VPN traffic).
To enable or disable the VPN Site to Site blade:
1. Select On or Off.
2. Click Apply
Note - When the blade is managed by Cloud Services, a lock icon is shown. You
cannot toggle between the on and off states. If you change other policy settings, the
change is temporary. Any changes made locally will be overridden in the next
synchronization between the gateway and Cloud Services.
A warning icon is shown if the blade is active but no VPN sites are defined. Click VPN Sites to
add a VPN site or see how many VPN sites are defined. The full list of the sites is located in
VPN > Site to Site VPN Sites.