https://community.checkpoint.com/t5/General-Topics/Hub-Mode-vs-VPN-Domain-Question/m-p/281595#M46782 <P>Hi all,</P> <P>I'm trying to nail down the exact relationship between Hub Mode and the Remote Access VPN Domain.</P> <P>My understanding so far:</P> <P>In split tunnel (default), only the VPN Domain networks are routed through the tunnel.<BR />With "Route all traffic to gateway" = Yes, all traffic goes through the gateway (form the object gw, not the global settings)</P> <P>My question: when Hub Mode is forced, is the configured Remote Access VPN Domain still evaluated, or is it effectively ignored/replaced by All_Internet?<BR /><BR />Thanks in advance</P> Thu, 27 Aug 2026 21:37:38 GMT RemoteUser 2026-08-27T21:37:38Z https://community.checkpoint.com/t5/General-Topics/Hub-Mode-vs-VPN-Domain-Question/m-p/281595#M46782 <P>Hi all,</P> <P>I'm trying to nail down the exact relationship between Hub Mode and the Remote Access VPN Domain.</P> <P>My understanding so far:</P> <P>In split tunnel (default), only the VPN Domain networks are routed through the tunnel.<BR />With "Route all traffic to gateway" = Yes, all traffic goes through the gateway (form the object gw, not the global settings)</P> <P>My question: when Hub Mode is forced, is the configured Remote Access VPN Domain still evaluated, or is it effectively ignored/replaced by All_Internet?<BR /><BR />Thanks in advance</P> Thu, 27 Aug 2026 21:37:38 GMT https://community.checkpoint.com/t5/General-Topics/Hub-Mode-vs-VPN-Domain-Question/m-p/281595#M46782 RemoteUser 2026-08-27T21:37:38Z https://community.checkpoint.com/t5/General-Topics/Hub-Mode-vs-VPN-Domain-Question/m-p/281686#M46801 <P>The VPN Domain (be it remote access or otherwise) still matters insofar as it determines what traffic that originates from the site should be encrypted to the destination.</P> Mon, 31 Aug 2026 15:58:09 GMT https://community.checkpoint.com/t5/General-Topics/Hub-Mode-vs-VPN-Domain-Question/m-p/281686#M46801 PhoneBoy 2026-08-31T15:58:09Z