Limitations
-
Supported versions are R80.40 and higher.
-
Only one VPN is supported for each customer Security Gateway
Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources..
-
Only one VPN Community is supported for each template.
-
When Default route table association and Default route table propagation are enabled in Amazon VPC console, spokes can communicate with each other not through the Security Gateway (bypass it).
To change this, assign the spokes to the correct route tables.
-
It is not supported to configure more VPN connections from the Customer of the Auto Scale Security Gateways to the Transit Gateway, or to another VPN (using VGW).
-
QoS
Check Point Software Blade on a Security Gateway that provides policy-based traffic bandwidth management to prioritize business-critical traffic and guarantee bandwidth and control latency. is not applied to interfaces when Route Based VPN is configured. For more information, see sk36157.