topic Policy RemotAccess does not works in General Topics

Policy RemotAccess does not works

Bastien_Lauc — Mon, 30 Oct 2023 16:16:07 GMT

Hi,

I am working Remote Access with mobile access and I create rules but il does not works.

The VPN connection works well.

I create a policy for ping + rdp the two servers AD (primary and backup) and when I saw this does not works, I create it on the dashboard and I have the same result.

I saw also I can chose the Policy Source of Mobile Access and if I understood Unified Policy allow to create policy with several blade more simply than legacy Policy. I don't know which is the more efficient ? And why neither m

My firewall and SMS are both in r81.10

Sorry for the lack of information I can provide, I'm a beginner.

Best Regards,

Bastien

Re: Policy RemotAccess does not works

CaseyB — Mon, 30 Oct 2023 20:08:32 GMT

Are those servers in the encryption domain? What do the logs say?

Re: Policy RemotAccess does not works

Bastien_Lauc — Mon, 30 Oct 2023 20:31:41 GMT

I don't nothing in the log. What does mean encryption domain ? For information, I have two computers in the same LAN with the servers and rdp + ping works. Should it be different via VPN?

Best Regards,

Bastien

Re: Policy RemotAccess does not works

CaseyB — Mon, 30 Oct 2023 20:57:52 GMT

By default, Check Point uses "All IP addresses behind Cluster Members based on topology information" for the VPN domain, but I usually see them setup as "user defined", which you might need to do in this case. (see attached) It's a matter of creating a network group and adding the networks / devices they need to be reached across the VPN; however, if you have any site-to-site VPNs setup or other VPN configurations, this could break that.

Here is some reading material: R81.10 Remote Access

Re: Policy RemotAccess does not works

Bastien_Lauc — Mon, 30 Oct 2023 21:14:38 GMT

Firstly, I put CP_default_Office_Mode_addresses_pool, but after your advise I create a Network Group with the two servers AD and I have the same result. I have not other VPN setup