topic Re: SMB remote access vpn clients connect to site to site vpn remote networks in SASE and Remote Access

SMB remote access vpn clients connect to site to site vpn remote networks

Baasanjargal_Ts — Tue, 10 Sep 2019 03:37:42 GMT

Hello,

Remote access clients want to connect with IPSsec vpn remote encryption domain hosts. Gateway is Checkpoint 1490 SMB appliance.

Remote clients can connect to office lan hosts successfully,

IPSec remote encryption domain hosts can connect with office lan hosts successfully,

Now we want to connect Remote client hosts with IPSec remote encryption domain hosts.

Re: SMB remote access vpn clients connect to site to site vpn remote networks

PhoneBoy — Tue, 10 Sep 2019 23:17:24 GMT

Pretty sure this will require configuration on both ends.
Is this SMB locally managed or centrally managed?

Re: SMB remote access vpn clients connect to site to site vpn remote networks

Baasanjargal_Ts — Wed, 11 Sep 2019 00:22:10 GMT

locally managed, remote peer has already added Remote access clients network to its Remote encryption domain

Re: SMB remote access vpn clients connect to site to site vpn remote networks

G_W_Albrecht — Wed, 11 Sep 2019 08:31:11 GMT

Then in VPN > Remote Access > Advanced, "Local Encryption Domain is defined by" click on "automatically..." link and define a manual encryption domain for RA VPN - containing both the local networks and the remote encryption domain.

Re: SMB remote access vpn clients connect to site to site vpn remote networks

Baasanjargal_Ts — Fri, 13 Sep 2019 00:03:08 GMT

Thanks, it works perfect,

I wrote some writeup here,
https://bskanet.blogspot.com/2019/09/checkpoint-smb-remote-vpn-clients.html