topic Re: SNX traffic routing in General Topics

SNX traffic routing

Railx — Mon, 05 Dec 2022 06:57:21 GMT

Good afternoon, we have a problem on R77.30
The SNX clients on Linux (for all distributions) are not routing traffic correctly. On Windows everything is fine.
For VPN clients the following is enabled: "Allow VPN cliens to route traffic though this gateway".
Please advise whether it is possible to configure correct routing for all traffic through the gateway?
Thank you

Re: SNX traffic routing

G_W_Albrecht — Mon, 05 Dec 2022 07:21:13 GMT

R77.30 is no longer supported.

Re: SNX traffic routing

Chris_Atkinson — Mon, 05 Dec 2022 07:25:53 GMT

Did you already attempt the configurations per sk31367 / sk31873?

Note R77.30 is out of support for a long time now.

Refer also: https://community.checkpoint.com/t5/Remote-Access-VPN/SNX-Clients-to-route-all-traffic-through-gateway/td-p/79890

Re: SNX traffic routing

Railx — Mon, 05 Dec 2022 08:10:42 GMT

Hello, yes we already have this configuration

Re: SNX traffic routing

Blason_R — Mon, 05 Dec 2022 09:21:40 GMT

Yes - THis is not possible and we tried that option already. In fact as per my experience stay away fro routing through gateway if you have a long list. It just breaks the connection and really takes the firewall to its knees.

I have a customer who wanted to route entire internet through firewall to inspect the traffic and I still feel the pain for that thing, 😞

Re: SNX traffic routing

Railx — Mon, 05 Dec 2022 09:26:07 GMT

Thank you for your response, we will try the setup again. Our traffic volume is not high enough to make a big difference