Gateways

Gateways are the cloud-based Check Point SASE servers deployed in the region you select. Each gateway is assigned a unique static IP address that can be connected to your on-premises or cloud resources through tunnels. You can deploy multiple gateways for redundancy, and load balancing. Check Point SASE supports two types of gateways:

Private Gateways

Private gateways are the dedicated gateways deployed for you. By default, all gateways are deployed as private. If you deploy multiple gateways, then at least one gateway must be private.

Note:

The default gateway is of the type private. Every Check Point SASE network must consist of at least one private gateway.

[DEPRECATED] Shared Gateways

Note:

Starting from 12 August 2026, shared gateways are no longer available.

Shared gateways are shared among customers. They are suitable if you cannot find a private gateway in your preferred region.

SASE supports shared gateways in these regions:

  • Austria

  • Argentina

  • Australia

  • Belgium

  • Brazil

  • Canada

  • Cyprus

  • Denmark

  • Finland

  • France

  • Germany

  • Hong Kong

  • India

  • Ireland

  • Israel

  • Italy

  • Japan

  • Mexico

  • The Netherlands

  • New Zealand

  • Poland

  • Portugal

  • Romania

  • Russia

  • Singapore

  • Spain

  • Sweden

  • Switzerland

  • USA East

  • USA West

  • The United Kingdom

Note:

  • By default, all gateways are deployed as private. If you want to deploy a shared gateway, at least one gateway must be private.

  • Shared gateways support only internet access. They do not support private access.

To allow members to connect to a shared gateway, see [DEPRECATED] Shared Network.