https://community.checkpoint.com/t5/SASE-and-Remote-Access/Configure-VPN-Encryption-Domain/m-p/76869#M11388 <P>Yes, additional IPs should be aded to the VPN domain. Mind, this configuration affects both GWs.</P> Mon, 02 Mar 2020 15:13:57 GMT _Val_ 2020-03-02T15:13:57Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/Configure-VPN-Encryption-Domain/m-p/76834#M11387 <P>Hi,</P><P>We have an customer with an already configured and working site-to-site VPN to a 3rd party. Now the customer needs access to an new IP at the 3rd party with traffic going both ways. I've added the IP to the access policy concerning the VPN tunnel but it's still not reachable.</P><P>Do I need to add the IP or range to the encryption domain as well?</P><P>-Lars</P> Mon, 02 Mar 2020 07:40:28 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Configure-VPN-Encryption-Domain/m-p/76834#M11387 miniPax 2020-03-02T07:40:28Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/Configure-VPN-Encryption-Domain/m-p/76869#M11388 <P>Yes, additional IPs should be aded to the VPN domain. Mind, this configuration affects both GWs.</P> Mon, 02 Mar 2020 15:13:57 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Configure-VPN-Encryption-Domain/m-p/76869#M11388 _Val_ 2020-03-02T15:13:57Z