check point firewall wont initiate vpn tunnel

In order to route all internet traffic over the VPN tunnel we need to set our gateway default gateway rank to 171 so BGP.

Our default BGP route rank is set to 170 and our default route rank is set to 1, lower rank number has higher priority over BGP route. By checking this option would allow not only Internet traffic, but to reach other VPN communities also (those where Center gateway participates).If the Satellites are locally managed devices, you will have to configure an “universal tunnel” to allow Satellite to send all traffic to Center gateway. Azure VPN gateways advertise default route 0.0.0.0/0 via BGP to Check Point gateways. This is a way to set center Gateway as default route. When trying to establish a VPN tunnel using Endpoint Connect client, the client says 'Authentication succeeded' and right after that 'Connection Failed: The user is not defined properly.'. To center, or through the center to other satellites, to internet and other VPN targets- Allows you to route all traffic to Center gateway.If you centrally manage all devices, by checking this option all traffic from Satellites (excluding local networks) would be sent to Central gateway.To center and to other satellites through center- Allows to route inside VPN Community.If you want to reach Satellite_B LAN from Satellite_A LAN you will have to pass through Center (hub and spoke).If you centrally manage all devices, by checking this option you would be able to route traffic from LAN_B to LAN_A and vice versa without any other configuration since the encryption domains are automatically negotiated with Center gateway to allow this.If the Satellites are locally managed devices, you will have to manually add the domain of Satellite_B to Center’s domain (from Satellite_A perspective) and the domain of Satellite_A to Center’s domain (from Satellite_B perspective) additionally to the networks already configured for Center to allow routing between both.

Only Center networks are reachable (as defined in encryption domain and policy)

To center only- Means only communication between Center to any Satellite and viceversa will be allowed.In case you had more than one Satellite, those devices would not be able to reach each other’s LAN networks through tunnel.

Check point firewall wont initiate vpn tunnel