topic Harmony SASE - Interbranch Communication in SASE and Remote Access

Harmony SASE - Interbranch Communication

raveen — Mon, 26 May 2025 13:11:13 GMT

Hi Guys,

two

I need to establish interbranch connectivity in a Harmony SASE environment. I have mentioned my specific use case below.

The customer is using the printers in the branch and these printers are plugged into the PCs via USB and share within the network using the Static IP of the PC.

Currently we are deploying Harmony SASE in the branch and having some problems establishing the connectivity between the Branch PCs to Printer PCs. I have attached the challenges we have below

The customer want to use the Disable Sign-out and Uninstall option.
Customer wanted to use Static IP for the Printer PCs and Harmony SASE does not support allocating Static SASE Network IPs to the endpoints.

Is there anyway to fulfill the requirement. I really appreciate any help you can provide.

Raveen.

Re: Harmony SASE - Interbranch Communication

Chris_Atkinson — Tue, 27 May 2025 12:12:11 GMT

Does the branch hardware consist of a device that supports terminating an IPSec VPN tunnel or are you trying to use a different connector?

This might be an alternate strategy to those use cases not supported by the agent as would expose the clients native IP.

Re: Harmony SASE - Interbranch Communication

raveen — Tue, 27 May 2025 04:40:08 GMT

I'm using SASE agents in the branch endpoints

Re: Harmony SASE - Interbranch Communication

Tomerda — Tue, 27 May 2025 11:45:50 GMT

Hey Raveen,

Disable sign out is configured via the user profile but it is available in certain plans.

We indeed don't have static virtual IP but printers PC but

1. If you don't install agent on this PC, we use the allocated IP by the admin

2. When working with agent at the office, we will use the real IP allocated by the admin. ETA: end of Q2/early Q3)

Please contact me at tomerd@checkpoint.com to discuss it in detail.

Tomer

Re: Harmony SASE - Interbranch Communication

_Val_ — Tue, 27 May 2025 12:16:38 GMT

Thanks @Tomerda