https://community.checkpoint.com/t5/Endpoint/Endpoint-Firewall-Internet-Control/m-p/64250#M1623 This should be possible, yes, by appropriately configuring the disconnected policy on the client.<BR />There is also a Hotspot option to temporarily open the firewall to allow users to register with a Hotspot portal. Thu, 03 Oct 2019 03:01:05 GMT PhoneBoy 2019-10-03T03:01:05Z https://community.checkpoint.com/t5/Endpoint/Endpoint-Firewall-Internet-Control/m-p/64225#M1622 <P>Hello Checkmates,</P><P>I've been out of the Checkpoint game since R75, now I'm implementing a new pair of CP 5600s with NGTX and need some help on the Endpoint client.</P><P>Basically I have a full tunnel setup and users are able to access the internet &amp; corporate resources over the VPN just fine.</P><P>However, I want to block internet access when they are not on VPN. Basically the only way they can get internet is through the VPN connection. Is this achievable with the Endpoint client, or do I need to do some Windows GPO snafu?</P><P>&nbsp;</P><P>Thanks in advance!</P> Wed, 02 Oct 2019 20:58:04 GMT https://community.checkpoint.com/t5/Endpoint/Endpoint-Firewall-Internet-Control/m-p/64225#M1622 TD_NICKEL 2019-10-02T20:58:04Z https://community.checkpoint.com/t5/Endpoint/Endpoint-Firewall-Internet-Control/m-p/64250#M1623 This should be possible, yes, by appropriately configuring the disconnected policy on the client.<BR />There is also a Hotspot option to temporarily open the firewall to allow users to register with a Hotspot portal. Thu, 03 Oct 2019 03:01:05 GMT https://community.checkpoint.com/t5/Endpoint/Endpoint-Firewall-Internet-Control/m-p/64250#M1623 PhoneBoy 2019-10-03T03:01:05Z