topic Re: Remote Access VPN in Cloud Firewall

Remote Access VPN

Mitesh — Fri, 17 Apr 2020 09:56:08 GMT

Hi,

Recently we deployed Checkpoint R80.40 Standalone on Azure cloud.

North South (Internet) & East-West(Inter Subnet) traffic is inspected by Checkpoint.

We having remote users and they want to access Server which is hosted in Azure via checkpoint. Did Remote Access VPN configuration in Checkpoint, But while connecting VPN using SecuRemote client getting below error message.

Failed to create the new site

Reason: Site is not working.

Looking for your support.

Thanks & Regards,

Mitesj

Re: Remote Access VPN

HeikoAnkenbrand — Fri, 17 Apr 2020 11:37:29 GMT

The question is, how did you configure your Azure firewall access?

Do you come via the Azure public IP of the frontend load balancer and LB NAT rules. That doesn't work.

You must use the Azure public IP of the cluster. And then there is the following to do:

1) In the Outgoing Route Selection section, select Operating system routing table option.

2) In the IPsec VPN section, go to Link Selection view. Under IP Selection by Remote Peer, select the Main address. Under Outgoing route Selection select Source IP address settings.

Maybe the settings will help.

Regards
Heiko

Re: Remote Access VPN

Mitesh — Fri, 17 Apr 2020 14:20:27 GMT

Thanks Heiko for the reply.

Am connecting using Public IP address, we have not configured External or Internal Load balancer.

Using Secure Remote VPN am able to connect the site but unable to access the any resources as per the access rule.

Also user in not getting IP address which I have mentioned in Office Mode Pool. They are getting IP address from FrontEnd Interface.

Regards,

Mitesh Nandu

Re: Remote Access VPN

PhoneBoy — Sun, 19 Apr 2020 20:01:45 GMT

Are you actually referring to SecuRemote here or are you referring to Check Point Mobile/Remote Access VPN?
These operate very differently.
For SecuRemote, this will probably apply: https://community.checkpoint.com/t5/Remote-Access-Solutions/Quick-Primer-on-How-to-Configure-your-Gateway-for-SecuRemote/m-p/79081#M2717

Re: Remote Access VPN

Mitesh — Tue, 21 Apr 2020 11:31:37 GMT

Issue got resolved post setting correct UDR.

Thanks guys for your knowledge & support.

Regards,

Mitesh