topic Re: Routing client VPN traffic into site-to-site VPN tunnel in SASE and Remote Access

Routing client VPN traffic into site-to-site VPN tunnel

BoGa — Fri, 14 Aug 2020 13:20:43 GMT

Hi Mates,

Is it possible to route Check Point Endpoint Security VPN client traffic into a site-to-site VPN tunnel?

The remote client connects from the Internet to the CP Gateway with the Endpoint Security VPN client and he should connect to a remote server over a site-to-site VPN tunnel. Both the client VPN and the site-to-site VPN managed and terminated by the same CP gateway. Office Mode is enabled, Hub Mode is disabled.

Thank you in advance for your help,

Best regards,

Gabor

Re: Routing client VPN traffic into site-to-site VPN tunnel

PhoneBoy — Fri, 14 Aug 2020 19:42:04 GMT

You have to add the remote site’s encryption domain into the Remote Access VPN Community.

Re: Routing client VPN traffic into site-to-site VPN tunnel

BoGa — Sat, 15 Aug 2020 07:54:44 GMT

Thank you for your reply PhoneBoy 🙂

Do you mean that the remote site's VPN domain should be added to the relevant Gateway >> Network Management >> VPN Domain >> Manually defined group?

Is it all that should be done or is there anything else to do?

Best regards,

BoGa

Re: Routing client VPN traffic into site-to-site VPN tunnel

Vladimir — Sun, 16 Aug 2020 01:56:41 GMT

I believe there is a separate "Remote Access VPN Domain" that should be used for this.

Re: Routing client VPN traffic into site-to-site VPN tunnel

BoGa — Mon, 24 Aug 2020 11:45:26 GMT

Hello Vladimir,

Yes, there is a Remote Access VPN Community, which is used for the Remote Access VPN users.

Participating Gateways and Participant User Groups can be added here, but not VPN domains directly. Participating Gateways could be relevant, where an Interoperable Device can be added, which represents the remote peer's gateway with its public IPv4 address and VPN Domain.

It would be the solution - as I understand correctly, right?

Thanks,

BoGa

Re: Routing client VPN traffic into site-to-site VPN tunnel

Francisco_Sachi — Thu, 09 Dec 2021 23:54:39 GMT

Hello BoGa, can u resolve this issue? Thanks a lot.