<div>
Depends on if you have traditional mode or simplified mode set.<br />
<br />
Simplified mode uses VPN communities to set the parameters for the VPN and then you use a policy rule to send the relevant data across the VPN.<br />
<br />
Trad mode is a little more complicated, but the action in the policy rule would be &quot;encrypt&quot; and you can then set the parameters within that.<br />
<br />
For simplified mode, the main steps would be as follows:<br />
<br />
1. &nbsp;Ensure all VPN endpoints (firewalls) are listed as either managed by the same smartcentre or added as external (interoperable) devices.<br />
2. &nbsp;Ensure that the VPN encryption domain is set correctly on the firewall object (the VPN domain is the networks behind the firewall)<br />
3. &nbsp;Create/configure a VPN community and add the relevant firewalls (this is where you also set the VPN properties, ie phase 1 and phase 2 settings)<br />
4. &nbsp;Create a rule as follows:<br />
<br />
Source :: destination :: service :: &nbsp;VPN Community :: &nbsp;accept :: &nbsp;(optional log action)<br />
<br />
5. &nbsp;Push policy and test.<br />
<br />
More info can be found with the R55 admin guide and also through the dashboard help function.<br />
<br />
Note, R55 is out of support for Check Point, I would consider upgrading bud
</div>


<div>
Deimark,<br />
<br />
Does this mean the external device has to be listed as an external device, for i.e. if the customer connecting in is using a Cisco firewall the device will need to be list with it's external ip address ? <br />
Once the vpn is configured is any way to test the connection ?<br />
<br />
Once the vpn is working I will be upgrading to ngx r65.
</div>


<div>
<div class="content wysiwyg-content">
Hi,<br />
<br />
How do you create a site to site vpn on Checkpoint NG R55 using a pre-shared key ?
</div>
</div>


Hi,

How do you create a site to site vpn on Checkpoint NG R55 using a pre-shared key ?

checkpoint site to site vpn

Software firewalls, also known as host-based firewalls, provide a layer of software on one host that controls network traffic in and out of that single machine. Most operating systems now include firewall software, but many available software firewalls include central distribution, antivirus systems and disaster recovery.