Disable Firewall Policy on the VPN Client

MarcuzShinz — Wed, 14 Jun 2023 01:31:37 GMT

We are currently configuring the Desktop Security Policy on the Checkpoint for VPN. We are configuring Rule Outbond to be when enduser VPN enters the system and will be blocked 8.8.4.4

And this rule worked as expected, but when the enduser disconnects the vpn, the computer is still blocked 8.8.4.4, making the user unable to access the internet.

I think it's because on the VPN Client app, the Firewall Policy tab still shows Enable and this causes the device to still be blocked according to the previously configured Rule.

I have consulted about being able to Disable Firewall Policy on the VPN Client app according to the following document.

https://sc1.checkpoint.com/documents/RemoteAccessClients_forWindows_AdminGuide/Content/Topics-RA-VPN-for-Win/Letting-Users-Disable-the-Firewall.htm?TocPath=Configuring%20Client%20Features%7CManaging%20Desktop%20Firewalls%7C_____13

However, is there a way to edit the VPN configuration file, so that when the user Disconnect VPN, Firewall Policy will also Disable?

Re: Disable Firewall Policy on the VPN Client

PhoneBoy — Wed, 14 Jun 2023 18:10:16 GMT

I believe this is done through the disconnected_in_house_fw_policy_enabled setting.
See: https://sc1.checkpoint.com/documents/RemoteAccessClients_forWindows_AdminGuide/Content/Topics-RA-VPN-for-Win/Location-Based-Policies.htm

topic Disable Firewall Policy on the VPN Client in Firewall and Security Management

Disable Firewall Policy on the VPN Client

Re: Disable Firewall Policy on the VPN Client