topic Re: Split Tunnel vs Full Tunnel in General Topics

Split Tunnel vs Full Tunnel

RemoteUser — Fri, 19 Dec 2025 09:39:25 GMT

Hi mates,

I’d like to understand how to verify whether my Check Point client VPN is configured as full tunnel or split tunnel.
Additionally, could you please explain the main differences between these two configurations?

Thanks in advance.

Re: Split Tunnel vs Full Tunnel

Chris_Atkinson — Fri, 19 Dec 2025 11:52:51 GMT

You can review the split tunnel configurations as outlined in the Remote Access admin guide and compare to your setup e.g.

https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_RemoteAccessVPN_AdminGuide/Content/Topics-VPNRG/Dynamic-Split-Tunneling-for-SaaS.htm?tocpath=_____20 (other relevant topics include hub mode)

Full tunnel essentially forces all traffic back to the gateway and out to the Destination / Internet.

This may improve security at the expense of performance/latency depending on the presence of other mitigating controls of course.

Re: Split Tunnel vs Full Tunnel

RemoteUser — Fri, 19 Dec 2025 11:17:29 GMT

Hi @Chris_Atkinson
thank you very much.

Could you please let me know how I can verify whether my firewall is configured for full tunnel or split tunnel?
Where exactly should I check this setting?

Re: Split Tunnel vs Full Tunnel

the_rock — Fri, 19 Dec 2025 13:33:15 GMT

Hey brother,

Here it is, Personally, I would always go with split tunnel, rather than full, but some companies may have different requirements. Here is why I say that. So, with full tunnel, as Im sure you know, all users' traffic will go through the firewall, so though its all visible to fw admins, it puts additional load on it. With split tunnel, if users choose to visit bad websites, well, we are adults, its their choice, but then at least it would go through their ISP link.

Hope that makes sense.

Re: Split Tunnel vs Full Tunnel

RemoteUser — Fri, 19 Dec 2025 13:47:36 GMT

Thanks Andy, that makes perfect sense. However, I checked now and see that in the global properties it is set to no, but in remote access for VPN clients it is selected, so it is enabled in "allow".
Does that mean I'm in split or full mode? Sorry, I'm a little confused... thanks, bro.

Re: Split Tunnel vs Full Tunnel

the_rock — Fri, 19 Dec 2025 13:52:06 GMT

If its disabled in global properties, then its split mode.

Re: Split Tunnel vs Full Tunnel

RemoteUser — Fri, 19 Dec 2025 13:53:23 GMT

thk as usual buddy

Re: Split Tunnel vs Full Tunnel

the_rock — Fri, 19 Dec 2025 13:57:33 GMT

Any time buddy.