Multiple Entry Point (MEP)
Multiple Entry Point (MEP) gives High Availability and load sharing to VPN connections. A gateway is one point of entry to the internal network. If the Security Gateway becomes unavailable, then the internal network is unavailable. A Check Point MEP environment has two or more Security Gateways for the same VPN domain to give remote users uninterrupted access.
MEP topology gives High Availability and load sharing with these characteristics:
-
There is no physical restriction on the location of MEP gateways. They can be geographically separated and not directly connected.
-
In Manual MEP gateways can be managed by different management servers. For Implicit MEP, gateways must have the same management server.
-
There is no state synchronization in MEP. If a gateway fails, the current connection falls and one of the backup gateways picks up the next connection.
-
Remote clients, not the gateways, find the gateway to use.