SD-WAN FEC

Introduction to FEC

Check Point SD-WAN Forward Error Correction (FEC) ensures the successful delivery of traffic by adding Error Correction Code (ECC) packets to the "Overlay - VPN" packet stream.

FEC can help improve reliability when a packet loss is high.

Important: Enable FEC only when the ISP line has consistently high packet loss between the Security Gateways that participate in "Overlay - VPN" with each other. If you enable FEC when the ISP line works correctly, then the throughput decreases. Enabling FEC applies only to new connections, and not to existing connections.

FEC Requirements

1. FEC requires at least two Security Gateways that participate in a Site to Site VPN tunnel with each other:

   • R82 and higher

   • R81.20 Jumbo Hotfix Accumulator Take 79 and higher

   • Quantum Spark R81.10.15 and higher

2. You must configure the each selected Security Gateway as described in SD-WAN Connection Type - "Overlay - VPN".

FEC Configuration

1. Log in to Check Point Infinity Portal.

2. Click the top left Menu > in the section Quantum, click SD-WAN.

3. From the top toolbar, click FEC.

4. Select the Security Gateways that participate in a Site to Site VPN tunnel with each other.

5. Click OK.

6. From the top toolbar, click Publish to save the changes.

7. From the top toolbar, click Enforce to apply the changes.

   The orange frame on this button means there are changes that are not enforced.

   

   In the popup window that opens, click Publish & Enforce Policy.