topic Change source IP on packet from Endpoint security client in Firewall and Security Management

Change source IP on packet from Endpoint security client

Aleksandar_Jova — Tue, 10 Jul 2018 14:46:29 GMT

Hi, i have troubles with VPN connectivity (Mobile Access blade) on Checkpoint 4200 appliance.

On Android/IOS everything works perfectly... there is problem only on Windows (haven't tryed on Linux).

Problem is that packets from connected "Endpoint security" (or any other) client comes to internal network with source IP of appliance, not with ip of connected client. There is no NAT configured... also we tryed with different "Link selection" options but nothing helps.

Please help?

Thank you.

Re: Change source IP on packet from Endpoint security client

Maarten_Sjouw — Tue, 10 Jul 2018 20:19:52 GMT

Hi Aleksander,

You are stating "There is no NAT configured." That sounds weird to me, you most probably have some sort of hide NAT configured for traffic going out to the internet?

Just make sure to add a no-NAT rule above all automatic rules that makes all traffic from the Office Mode range to your internal network to use original source and destination.

Re: Change source IP on packet from Endpoint security client

Aleksandar_Jova — Wed, 11 Jul 2018 14:26:54 GMT

Hello,

fixed it. It was really strange, turned appliance upside down and nothing helped.

In the end created new ip pool for office mode with nat turned off (it was off anyhow) and it works.

Very strange... anyhow thank you.