topic Re: VPN in General Topics

VPN

handiansudianto — Mon, 06 Mar 2023 13:51:56 GMT

Hello,

How we can route all internet traffic from user who connected to the VPN client, so the traffic will pass thru the checkpoint rather than the traffic goes to user local internet provider?

Re: VPN

the_rock — Mon, 06 Mar 2023 14:02:39 GMT

Its called hub mode. You need to enable below options and then proper rules to allow it. In other words, split VPN needs to be disabled. Please refer to below screenshots, hope it helps.

Andy

First option is in global properties and should say "yes"

Below is on gateway properties and should be enabled:

Re: VPN

handiansudianto — Mon, 06 Mar 2023 14:29:11 GMT

Hello,

So this setting is globally, i mean we can't configure for some vpn user?

Re: VPN

the_rock — Mon, 06 Mar 2023 14:30:20 GMT

Not as far as I know.

Re: VPN

the_rock — Mon, 06 Mar 2023 14:31:44 GMT

I had client ask me that same question once and when we spoke with TAC, they were told it was not possible. Mind you, this was just over a year ago, maybe end of 2021, so its possible something may had changed since : - )

Re: VPN

the_rock — Mon, 06 Mar 2023 14:38:37 GMT

To add to my last response, you are probably better to open an official TAC case and get answer in writitng. You know how the term goes, CYA, aka cover your a * * ; - )

Re: VPN

PhoneBoy — Tue, 07 Mar 2023 19:10:50 GMT

You can configure it “Client Decide” so a user can choose to use Hub Mode.
However, you cannot force it for a specific user, it is either forced for everyone or forced for no one.

Re: VPN

the_rock — Wed, 08 Mar 2023 00:50:11 GMT

Good point, though I had not see any customers choose option for client decide, but it is there if someone chooses to use it 🙂