Configuring the SD-WAN Device

When you create the site at Check Point CloudGuard Connect, on this site you must configure your branch office to route traffic through CloudGuard Connect.

Check Point creates the back-end architecture for tunneling the traffic from the branch device to the Internet.

Example:

Notes: To enhance the service reliability, we recommend you to create and use two tunnels. If you use IPsec tunnels, Check Point provides the tunnel addresses as FQDN domains. If your branch device supports configuration of the tunnels as IP addresses, and not as FQDN domains, Check Point strongly recommends to send a notification to Check Point Support about your configuration. For more information about how to open a support ticket for CloudGuard Connect, see sk154712.

To configure your branch device:

1. On the site thumbnail, click the Configure branch device button:

   

   The Instructions window opens.

2. From the top field, select your SD-WAN branch office device.

3. Follow the instructions on the screen to get the IPsec configuration properties, pre-shared key, tunnel addresses, and the traffic routes.

   Example:

   

4. Click Close.