topic Re: Capsule VPN "Encrypt all traffic and route to gateway" option in SASE and Remote Access

Capsule VPN "Encrypt all traffic and route to gateway" option

Theo — Fri, 17 Apr 2020 12:46:49 GMT

Hi, We need to route internet traffic in our security gateway. We were able to configure successfully and let Endpoint Security users are able to pass through internet traffic to gateway after we enable the "Encrypt all traffic and route to gateway" But this option is not available in Check Point Capsule VPN app for mobile devices?

Re: Capsule VPN "Encrypt all traffic and route to gateway" option

PhoneBoy — Fri, 17 Apr 2020 15:28:54 GMT

As far as I know that's supported.
What precisely gives you the impression that it's not?

Re: Capsule VPN "Encrypt all traffic and route to gateway" option

Theo — Sun, 19 Apr 2020 10:21:38 GMT

I enabled Capsule in security gateway object in SmartConsole, reinstall policy.

In computer with Endpoint Security, using my test account I confirmed the internet traffic is routed to the gateway.

using the same credentials, I tried to login to Capsule (in my Android), signed-in successfully, tried to browse from said phone but only domain-udp and tunnel_test is the traffic being seen in the log.

Re: Capsule VPN "Encrypt all traffic and route to gateway" option

PhoneBoy — Mon, 20 Apr 2020 00:36:18 GMT

Considering its mentioned as explicitly supported here, it should work: http://downloads.checkpoint.com/dc/download.htm?ID=20361
You may want to get the TAC involved.