Dynamic IP Tunnels

In order to establish a site-to-site tunnel (IPSec or WireGuard) between your Check Point SASE gateway and a firewall or router with a dynamic public IP address, you need to apply some modifications to the tunnel creation process. Follow the instructions in:

Warning:

  • This option is not supported by cloud IaaS providers (AWS, GCP, or Azure).

  • Only a single dynamic IP IPSec tunnel is supported per each Cloud Gateway.