https://community.checkpoint.com/t5/Firewall-and-Security-Management/Location-Awareness-Clarifications/m-p/109503#M14927 <P>A TAC case may be needed here to clarify what's going on.</P> Mon, 01 Feb 2021 22:50:08 GMT PhoneBoy 2021-02-01T22:50:08Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Location-Awareness-Clarifications/m-p/109213#M14810 <P>Hi all,</P><P>I need a clarify on how Location Awareness works with Endpoint Client.</P><P>Currently i've an HA Pair of CP that will only server for SSL\IPSec Endpoint (using alwasy-on and machine authentication), so the main goal is to avoid client connection when a laptop will be into our Office.</P><P>The first option, to check if a client is connecting to an internal interface, is not feasible because as i've said this cluster it's on our DC and cannot be reached to a private interface from the office, but just over a site-to-site VPN. Third option of DC also is not a good solution because we are passing all Active Directory stuff over VPN. So i've configured the second option, added our office and DC subnet to internals network (and also specified our Wifi SSID).</P><P>Because we are still in smart-working (and cannot have access to office), i've setup a new SSID at my home using one of the subnet of internals network specified on SG. Then i've disconnected manually the VPN client (using "trac disconnect"), then connect again but it looks like that the source subnet is not considered as internal but just as external.</P><P>Do I need to add also the public IP inside the internals network?</P><P>Thanks in advance</P> Thu, 28 Jan 2021 20:22:56 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Location-Awareness-Clarifications/m-p/109213#M14810 stich86 2021-01-28T20:22:56Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Location-Awareness-Clarifications/m-p/109397#M14905 <P>Is that segment you set up at home also in the RemoteAccess encryption domain?</P> Mon, 01 Feb 2021 03:21:32 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Location-Awareness-Clarifications/m-p/109397#M14905 PhoneBoy 2021-02-01T03:21:32Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Location-Awareness-Clarifications/m-p/109408#M14911 <P>Yes,&nbsp;</P><P>One of the subnet is also into RemoteAccess because I need to reach some resources into my office (NAS, DC and other services)</P> Mon, 01 Feb 2021 07:46:11 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Location-Awareness-Clarifications/m-p/109408#M14911 stich86 2021-02-01T07:46:11Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Location-Awareness-Clarifications/m-p/109503#M14927 <P>A TAC case may be needed here to clarify what's going on.</P> Mon, 01 Feb 2021 22:50:08 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Location-Awareness-Clarifications/m-p/109503#M14927 PhoneBoy 2021-02-01T22:50:08Z