topic Re: Reject "'Ip address was blocked access to 'aws', why traffic always vpn traffic in General Topics

Reject "'Ip address was blocked access to 'aws', why traffic always vpn traffic

Ricki_Juntak — Thu, 02 Dec 2021 09:35:33 GMT

Hello guys,

I need help about connection always rejected by gateway like scema below:

Host(ip local with nat static to public) - checkpoint gateway -> AWS

the network host is on the vpn domain grup network

the vpn domain is used on the community vpn remote access. but the host not connected overvpn.

the connection not overvpn but the gateway state from log said this is a vpn traffic (why this happening).

when we try test telnet to AWS(opening on the rule policy too) from some host not using vpn result is same and cannot ssh to aws

maybe anyone have face this same issue...

Re: Reject "'Ip address was blocked access to 'aws', why traffic always vpn traffic

PhoneBoy — Mon, 06 Dec 2021 04:37:40 GMT

Your description isn't making a lot of sense.
A network diagram, screenshots of the relevant configuration, log cards (with sensitive details redacted), and version/JHF level is appreciated.

Re: Reject "'Ip address was blocked access to 'aws', why traffic always vpn traffic

Ricki_Juntak — Wed, 08 Dec 2021 02:17:42 GMT

Thank you PhoneBoy for your response,

but I can't share the log, configuration and topology, regarding from user info.

we run vpn tu and find ip address a.b.c.d on the list ike, its means have a tunnel from a.b.c.d to CP gateway right?

but the user confirm no configuration vpn from a.b.c.d to CP gateway.

#vpn tu

the last information from customer the endpoint(PC) have 2 vpn, 1 openvpn to a.b.c.d and 1 vpn to Checkpoint Gateway and at the CP Gateway have rule from vpn domain segmen to access a.b.c.d

Re: Reject "'Ip address was blocked access to 'aws', why traffic always vpn traffic

PhoneBoy — Mon, 13 Dec 2021 00:00:35 GMT

If you can't share details publicly, recommend working with the TAC.

Re: Reject "'Ip address was blocked access to 'aws', why traffic always vpn traffic

Ricki_Juntak — Mon, 13 Dec 2021 02:22:49 GMT

Thank you PhoneBoy

Regards,

Ricki

topic Re: Reject &quot;'Ip address was blocked access to 'aws', why traffic always vpn traffic in General Topics

Reject "'Ip address was blocked access to 'aws', why traffic always vpn traffic

Re: Reject "'Ip address was blocked access to 'aws', why traffic always vpn traffic

Re: Reject "'Ip address was blocked access to 'aws', why traffic always vpn traffic

Re: Reject "'Ip address was blocked access to 'aws', why traffic always vpn traffic

Re: Reject "'Ip address was blocked access to 'aws', why traffic always vpn traffic

topic Re: Reject "'Ip address was blocked access to 'aws', why traffic always vpn traffic in General Topics