topic Re: Checkpoint 5200 VPN - connect to subnetwork of the network in SASE and Remote Access

Checkpoint 5200 VPN - connect to subnetwork of the network

TW — Sun, 09 Feb 2020 05:07:50 GMT

5200 is the FW of network A

network B connects with network A and browses internet via network A

Workstations at local network A add a route to assess network B

Now a remote workstation uses secure remote to connect with network A

No problem at all but how can the remote workstation connect with network B

simply add a route at the remote workstation is not worked

route to network B has been added at FW5200

Re: Checkpoint 5200 VPN - connect to subnetwork of the network

PhoneBoy — Sun, 09 Feb 2020 22:20:57 GMT

How is the remote workstation connected in this case?
Is there a route from network B back to the remote workstation's IP?
A diagram would really help.

Re: Checkpoint 5200 VPN - connect to subnetwork of the network

TW — Mon, 10 Feb 2020 01:15:04 GMT

remote workstation can connect with network A by VPN secure remote
network B can access network A and internet

remote workstation failed to assess network B by adding a route as all workstations in network A adds

No routing is added in network B as its gateway is defaulted

Re: Checkpoint 5200 VPN - connect to subnetwork of the network

PhoneBoy — Mon, 10 Feb 2020 02:02:45 GMT

I assume you mean the SecuRemote VPN client in this case.
Does your Encryption Domain on the gateway include Network B?
If it does not, this won't work.
This VPN domain is defined in the relevant gateway object in SmartConsole under Network Management > VPN Domain.
If you're using the "All IP Addresses behind Gateway Based on Topology Information" option, then the Topology settings for your internal interface must be set to an option that includes Network A and B.
Policy must be reinstalled for these changes to take effect.

Re: Checkpoint 5200 VPN - connect to subnetwork of the network

TW — Sun, 01 Mar 2020 07:53:29 GMT

Thanks a lot.