<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Route Internet traffic through S2S in Firewall and Security Management</title>
    <link>https://community.checkpoint.com/t5/Firewall-and-Security-Management/Route-Internet-traffic-through-S2S/m-p/233969#M45316</link>
    <description>&lt;P&gt;You'll need a Star VPN Community configured as follows:&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 400px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/28572i9C5F71A39158B2A7/image-size/medium?v=v2&amp;amp;px=400" role="button" title="image.png" alt="image.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;Even if the SMB devices are not managed centrally, you can configure the remote site to be "Route all traffic":&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 400px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/28573i4EFAAD4C817CB41A/image-size/medium?v=v2&amp;amp;px=400" role="button" title="image.png" alt="image.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;So definitely possible.&lt;/P&gt;</description>
    <pubDate>Wed, 27 Nov 2024 16:25:55 GMT</pubDate>
    <dc:creator>PhoneBoy</dc:creator>
    <dc:date>2024-11-27T16:25:55Z</dc:date>
    <item>
      <title>Route Internet traffic through S2S</title>
      <link>https://community.checkpoint.com/t5/Firewall-and-Security-Management/Route-Internet-traffic-through-S2S/m-p/233951#M45310</link>
      <description>&lt;P&gt;Hi all,&lt;/P&gt;
&lt;P&gt;we have a central VPN-Gateway&amp;nbsp;R81.20 and several&amp;nbsp;Quantum Spark 1550 Appliance&amp;nbsp;R81.10.08&lt;/P&gt;
&lt;P&gt;All&amp;nbsp;Appliance are connected to the Central VPN-Gateway via S2S VPN to access some internal resources behind&amp;nbsp;VPN-Gateway.&lt;/P&gt;
&lt;P&gt;Now I was given a task to&amp;nbsp;&lt;SPAN class="EzKURWReUAB5oZgtQNkl" data-src-align="0:9"&gt;set&lt;/SPAN&gt;&lt;SPAN&gt; up &lt;/SPAN&gt;&lt;SPAN class="EzKURWReUAB5oZgtQNkl" data-src-align="10:3"&gt;everything&lt;/SPAN&gt; &lt;SPAN class="EzKURWReUAB5oZgtQNkl" data-src-align="14:3"&gt;so&lt;/SPAN&gt; &lt;SPAN class="EzKURWReUAB5oZgtQNkl" data-src-align="19:5"&gt;that&lt;/SPAN&gt; &lt;SPAN class="EzKURWReUAB5oZgtQNkl" data-src-align="25:8"&gt;Internet&lt;/SPAN&gt; &lt;SPAN class="EzKURWReUAB5oZgtQNkl" data-src-align="34:6"&gt;traffic&lt;/SPAN&gt; &lt;SPAN class="EzKURWReUAB5oZgtQNkl" data-src-align="41:2"&gt;from&lt;/SPAN&gt; &lt;SPAN class="EzKURWReUAB5oZgtQNkl" data-src-align="44:8"&gt;branches&lt;/SPAN&gt; &lt;SPAN class="EzKURWReUAB5oZgtQNkl" data-src-align="53:3"&gt;goes&lt;/SPAN&gt; &lt;SPAN class="EzKURWReUAB5oZgtQNkl" data-src-align="57:5"&gt;through&lt;/SPAN&gt;&lt;SPAN&gt; a S2S&amp;nbsp;&lt;/SPAN&gt;&lt;SPAN class="EzKURWReUAB5oZgtQNkl" data-src-align="63:3"&gt;VPN&lt;/SPAN&gt; &lt;SPAN class="EzKURWReUAB5oZgtQNkl" data-src-align="67:1"&gt;and&lt;/SPAN&gt;&lt;SPAN&gt;&amp;nbsp;the&amp;nbsp;&lt;/SPAN&gt;&lt;SPAN class="EzKURWReUAB5oZgtQNkl" data-src-align="69:11"&gt;central&lt;/SPAN&gt; &lt;SPAN class="EzKURWReUAB5oZgtQNkl" data-src-align="81:7"&gt;gateway. Where can I begin?&amp;nbsp;&lt;SPAN&gt;I &lt;/SPAN&gt;guess I need&lt;SPAN&gt; to &lt;/SPAN&gt;either set&lt;SPAN&gt; up a &lt;/SPAN&gt;policy or enable&lt;SPAN&gt; a check &lt;/SPAN&gt;mark&lt;SPAN&gt; somewhere &lt;/SPAN&gt;to route everything through&lt;SPAN&gt; a &lt;/SPAN&gt;VPN. If&lt;SPAN&gt;, of &lt;/SPAN&gt;course&lt;SPAN&gt;, &lt;/SPAN&gt;it&lt;SPAN&gt; is &lt;/SPAN&gt;even possible&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN class="EzKURWReUAB5oZgtQNkl" data-src-align="81:7"&gt;Thank you!&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 27 Nov 2024 15:47:06 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Firewall-and-Security-Management/Route-Internet-traffic-through-S2S/m-p/233951#M45310</guid>
      <dc:creator>Exonix</dc:creator>
      <dc:date>2024-11-27T15:47:06Z</dc:date>
    </item>
    <item>
      <title>Re: Route Internet traffic through S2S</title>
      <link>https://community.checkpoint.com/t5/Firewall-and-Security-Management/Route-Internet-traffic-through-S2S/m-p/233969#M45316</link>
      <description>&lt;P&gt;You'll need a Star VPN Community configured as follows:&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 400px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/28572i9C5F71A39158B2A7/image-size/medium?v=v2&amp;amp;px=400" role="button" title="image.png" alt="image.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;Even if the SMB devices are not managed centrally, you can configure the remote site to be "Route all traffic":&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 400px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/28573i4EFAAD4C817CB41A/image-size/medium?v=v2&amp;amp;px=400" role="button" title="image.png" alt="image.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;So definitely possible.&lt;/P&gt;</description>
      <pubDate>Wed, 27 Nov 2024 16:25:55 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Firewall-and-Security-Management/Route-Internet-traffic-through-S2S/m-p/233969#M45316</guid>
      <dc:creator>PhoneBoy</dc:creator>
      <dc:date>2024-11-27T16:25:55Z</dc:date>
    </item>
    <item>
      <title>Re: Route Internet traffic through S2S</title>
      <link>https://community.checkpoint.com/t5/Firewall-and-Security-Management/Route-Internet-traffic-through-S2S/m-p/233971#M45317</link>
      <description>&lt;P&gt;What&amp;nbsp;&lt;a href="https://community.checkpoint.com/t5/user/viewprofilepage/user-id/7"&gt;@PhoneBoy&lt;/a&gt;&amp;nbsp;mentioned is EXACTLY what you need.&lt;/P&gt;
&lt;P&gt;Andy&lt;/P&gt;</description>
      <pubDate>Wed, 27 Nov 2024 16:42:30 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Firewall-and-Security-Management/Route-Internet-traffic-through-S2S/m-p/233971#M45317</guid>
      <dc:creator>the_rock</dc:creator>
      <dc:date>2024-11-27T16:42:30Z</dc:date>
    </item>
  </channel>
</rss>

