Heroku Enterprise

An active Check Point SASE Administrator Portal account and network.
Make sure you have installed the Check Point SASE Agent on your devices.
Administrator account in the Firewall / Router / Cloud Management Portal.

This describes the process to establish a Site-to-Site VPN tunnel between your Check Point SASE network and your Heroku Enterprise environment.

After you obtain your private Check Point SASE gateway, set up a VPN gateway for the Private Space:

heroku spaces:vpn:connect \
--name perimeter81 \
--ip PUBLIC_IP_OF_YOUR_VPN_GATEWAY \
--cidrs '10.255.248.0/21' \
--space SPACE

Setting up the gateway takes a few minutes. Run the wait command to wait for the gateway to be ready:
```
heroku spaces:vpn:wait --space SPACE perimeter81
```

When the gateway is ready, get the configuration:

heroku spaces:vpn:info --space SPACE perimeter81

The above command returns a table that contains all the details you need to configure Check Point SASE.

Sample output:

heroku spaces:vpn:info --space SPACE perimeter81
=== SPACE VPNs
VPN Tunnel  Customer Gateway  VPN Gateway    Pre-shared Key   Routable Subnets  IKE Version
──────────  ────────────────  ─────────────   ──────────────  ────────────────  ───────────
Tunnel 1    52.91.173.226     34.203.187.158  abcdef12345     10.0.0.0 /16      1
Tunnel 2    52.91.173.226     34.227.70.143   123456abcdef    10.0.0.0 /16      1