topic Harmony Endpoint Firewall- block internet when VPN is disconnected in Endpoint

Harmony Endpoint Firewall- block internet when VPN is disconnected

Cathy_Cheng — Thu, 16 Apr 2026 11:43:02 GMT

Is it possible to use Harmony Endpoint Firewall to achieve the following: block a client’s internet access (except for a few specific websites) when the Endpoint VPN is disconnected?

Re: Harmony Endpoint Firewall- block internet when VPN is disconnected

Alex- — Thu, 16 Apr 2026 12:52:06 GMT

Yes, with location awareness. It's defined by pinging or HTTP'ing defined targets, ideally completely inside the network, and then you can make a Connected/Disconnected policy.

Re: Harmony Endpoint Firewall- block internet when VPN is disconnected

Cathy_Cheng — Thu, 16 Apr 2026 23:46:23 GMT

Thanks Alex. @Alex-

So if I define it to ping a few internal hosts, and they are all reachable, that indicates the VPN is connected—correct?

For the connected/disconnected firewall policy, can we allow a few specific websites and block the rest when the VPN is not connected?

Is this the location awareness setting?

Re: Harmony Endpoint Firewall- block internet when VPN is disconnected

Alex- — Fri, 17 Apr 2026 13:58:09 GMT

Yes. But what you want to achieve is only truly effective if you tunnel all remote VPN traffic through the gateways.

As soon as the VPN is connected, the monitored systems will be reachable so the policy will switch in "Connected" mode.

Re: Harmony Endpoint Firewall- block internet when VPN is disconnected

Cathy_Cheng — Fri, 24 Apr 2026 10:15:37 GMT

@Alex- We tunnel all traffic (no Split tunnling) .