https://community.checkpoint.com/t5/General-Topics/Is-It-possible-to-connect-a-host-from-a-VPN-site-to-site-to-a/m-p/64602#M13174 Make sure to setup the VPN topology for remote access including the remote network at the 3rd party. Next to that you need to allow the traffic by a rule.<BR />Also have the 3rd party include the Office mode network in the vpn topology for your end. Wed, 09 Oct 2019 08:20:50 GMT Maarten_Sjouw 2019-10-09T08:20:50Z https://community.checkpoint.com/t5/General-Topics/Is-It-possible-to-connect-a-host-from-a-VPN-site-to-site-to-a/m-p/64539#M13153 <P>Hi, I have only one VPN cluster - Check Point (80.20).</P><P>There are site to site and cliente to site VPNs in this cluster.</P><P>Is It possible to connect a host from a VPN site to site to a VPN client?</P><P>When the source tries, It drops with message:</P><P>"Routing outside encryption domain not enabled for this client"</P> Tue, 08 Oct 2019 13:50:49 GMT https://community.checkpoint.com/t5/General-Topics/Is-It-possible-to-connect-a-host-from-a-VPN-site-to-site-to-a/m-p/64539#M13153 AlanDias 2019-10-08T13:50:49Z https://community.checkpoint.com/t5/General-Topics/Is-It-possible-to-connect-a-host-from-a-VPN-site-to-site-to-a/m-p/64592#M13171 Have certainly done this in the past where the clients are paid for clients with the OfficeMode.<BR />Had to create a rule allowing the connection from the Internal networks to the OfficeMode Network. That rule does not have any VPN specified.<BR />Any Firewall on the VPN Client needed to allow the connection from the Internal Networks as well. Wed, 09 Oct 2019 07:33:06 GMT https://community.checkpoint.com/t5/General-Topics/Is-It-possible-to-connect-a-host-from-a-VPN-site-to-site-to-a/m-p/64592#M13171 mdjmcnally 2019-10-09T07:33:06Z https://community.checkpoint.com/t5/General-Topics/Is-It-possible-to-connect-a-host-from-a-VPN-site-to-site-to-a/m-p/64602#M13174 Make sure to setup the VPN topology for remote access including the remote network at the 3rd party. Next to that you need to allow the traffic by a rule.<BR />Also have the 3rd party include the Office mode network in the vpn topology for your end. Wed, 09 Oct 2019 08:20:50 GMT https://community.checkpoint.com/t5/General-Topics/Is-It-possible-to-connect-a-host-from-a-VPN-site-to-site-to-a/m-p/64602#M13174 Maarten_Sjouw 2019-10-09T08:20:50Z https://community.checkpoint.com/t5/General-Topics/Is-It-possible-to-connect-a-host-from-a-VPN-site-to-site-to-a/m-p/64645#M13188 <P>See <A class="cp_link sc_ellipsis" href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk94071&amp;partition=Advanced&amp;product=Endpoint" target="_blank">sk94071: Cannot access Remote VPN client from Internal host</A>&nbsp;for the needed configuration steps !</P> Wed, 09 Oct 2019 14:11:30 GMT https://community.checkpoint.com/t5/General-Topics/Is-It-possible-to-connect-a-host-from-a-VPN-site-to-site-to-a/m-p/64645#M13188 G_W_Albrecht 2019-10-09T14:11:30Z https://community.checkpoint.com/t5/General-Topics/Is-It-possible-to-connect-a-host-from-a-VPN-site-to-site-to-a/m-p/64651#M13192 <P>Will also need HubMode enabled on the Gateway that connecting too.</P><P>&nbsp;</P><P>Separate Remote Access VPN Encryption Domain</P><P>Main Encryption Domain should include the Office Mode Network hence why need to use seperate Encryption Domain for Remote Access.</P><P>Site to Site VPN's should make sure that they see the Office Mode as part of the Site to Site VPN.</P><P>&nbsp;</P> Wed, 09 Oct 2019 14:31:14 GMT https://community.checkpoint.com/t5/General-Topics/Is-It-possible-to-connect-a-host-from-a-VPN-site-to-site-to-a/m-p/64651#M13192 mdjmcnally 2019-10-09T14:31:14Z