Initiate from Internal (server) traffic to SSL VPN (RA) users traffic flow - R80.20

johannsmith — Mon, 08 Jun 2020 09:39:12 GMT

Hi all,

I will keep this as simple as possible.

An internal network segment has a specific host that scan the internal network(s) continuously for any threats.

With the (new) current scenario the work force are now 100% remote and connects using SSL VPN. Access from the end-user via SSL VPN is not a problem and split-tunnelling is in use.

With the order of processing and the way Checkpoint FW's deal with internal traffic to SSL VPN traffic, should I expect that the same 'scanning host' should reach the SSL VPN users if there is any to any policy rule in place for just the scanning host as an object(scanHost_object) and the vpn users (ra_object) as part of a troubleshooting session.

The FW engineers I'm working with could not answer me in terms of whether the Checkpoint would need any 'special' considerations in terms of traffic being initiated from the internal network(s) to RA SSL VPN users.

Any guidance/advise would be appreciated.

Regards,

Johann

Re: Initiate from Internal (server) traffic to SSL VPN (RA) users traffic flow - R80.20

PhoneBoy — Thu, 11 Jun 2020 03:16:39 GMT

In general, yes, this should work (assuming you're using Office Mode).
There may be one other setting in Global Properties that needs to be set for this also.

topic Initiate from Internal (server) traffic to SSL VPN (RA) users traffic flow - R80.20 in SASE and Remote Access

Initiate from Internal (server) traffic to SSL VPN (RA) users traffic flow - R80.20

Re: Initiate from Internal (server) traffic to SSL VPN (RA) users traffic flow - R80.20