1. Home
  2. Networking
  3. Check Point FireWall

Chapter 11. Site-to-Site VPN

This chapter is designed to be a practical guide to planning and configuring site-to-site Virtual Private Networks (VPNs) with FireWall-1. I briefly cover a few key terms and concepts and jump right into what can be done in FireWall-1 and how to do it. This chapter is not meant to comprehensively cover encryption or encryption technologies.

By the end of this chapter, you should be able to do the following:

  • Plan for a VPN

  • Determine which key exchange and encryption schemes FireWall-1 uses

  • Set up a VPN with FireWall-1

  • Understand what a gateway cluster is and what functions it provides

  • Troubleshoot VPN problems



    		Frequently Asked Questions
    		Preface
    		Chapter 1. Introduction to Firewalls
    		Chapter 2. Planning Your FireWall-1 Installation
    		Chapter 3. Installing FireWall-1
    		Chapter 4. Building Your Rulebase
    		Chapter 5. Logging and Alerting
    		Chapter 6. Common Issues
    		Chapter 7. Remote Management
    		Chapter 8. User Authentication
    		Chapter 9. Content Security
    		Chapter 10. Network Address Translation
    		Chapter 11. Site-to-Site VPN
    		Introduction to a VPN
    		A Word about Licensing
    		FWZ, IPSec, and IKE
    		How to Configure Encryption
    		Frequently Asked Questions about VPNs in FireWall-1
    		Troubleshooting VPN Problems
    		Summary
    		Sample Configurations
    		Chapter 12. SecuRemote and SecureClient
    		Chapter 13. High Availability
    		Chapter 14. INSPECT
    		Appendix A. Securing Your Bastion Host
    		Appendix B. Sample Acceptable Usage Policy
    		Appendix C. 'firewall-1.conf' File for Use with OpenLDAP v1
    		Appendix D. 'firewall-1.schema' File for Use with OpenLDAP v2
    		Appendix E. Performance Tuning
    		Appendix F. Sample 'defaultfilter.pf' File
    		Appendix G. Other Resources
    		Appendix H. Further Reading