topic Re: Exclude VPN traffic from rules with ANY in VPN field. in General Topics https://community.checkpoint.com/t5/General-Topics/Exclude-VPN-traffic-from-rules-with-ANY-in-VPN-field/m-p/89903#M18009 Thank you very much! Fri, 26 Jun 2020 11:26:36 GMT Gusa2727 2020-06-26T11:26:36Z Exclude VPN traffic from rules with ANY in VPN field. https://community.checkpoint.com/t5/General-Topics/Exclude-VPN-traffic-from-rules-with-ANY-in-VPN-field/m-p/89893#M18006 <P>Hi, is there a way to avoid some vpn traffic matching rules with VPN field set to ANY? Thanks!</P> Fri, 26 Jun 2020 09:47:08 GMT https://community.checkpoint.com/t5/General-Topics/Exclude-VPN-traffic-from-rules-with-ANY-in-VPN-field/m-p/89893#M18006 Gusa2727 2020-06-26T09:47:08Z Re: Exclude VPN traffic from rules with ANY in VPN field. https://community.checkpoint.com/t5/General-Topics/Exclude-VPN-traffic-from-rules-with-ANY-in-VPN-field/m-p/89899#M18007 <P>Yes there is.</P> <P><A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk106597" target="_self">Best practice</A> is to configure your VPN rules directly after the firewall management rules in the beginning of your rulebase.</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 316px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/7025iEBACA10433164367/image-size/large?v=v2&amp;px=999" role="button" title="image.png" alt="image.png" /></span></P> <P>At the end of your VPN section you should create a VPN STEALTH rule that drops all other VPN traffic that has not been accepted before.</P> <P>Done. Now VPN in excluded from the ANY VPN field in your rules.</P> Fri, 26 Jun 2020 11:28:05 GMT https://community.checkpoint.com/t5/General-Topics/Exclude-VPN-traffic-from-rules-with-ANY-in-VPN-field/m-p/89899#M18007 Danny 2020-06-26T11:28:05Z Re: Exclude VPN traffic from rules with ANY in VPN field. https://community.checkpoint.com/t5/General-Topics/Exclude-VPN-traffic-from-rules-with-ANY-in-VPN-field/m-p/89903#M18009 Thank you very much! Fri, 26 Jun 2020 11:26:36 GMT https://community.checkpoint.com/t5/General-Topics/Exclude-VPN-traffic-from-rules-with-ANY-in-VPN-field/m-p/89903#M18009 Gusa2727 2020-06-26T11:26:36Z