topic Re: Disable VPN for clients from inside network to the firewall in SASE and Remote Access

Disable VPN for clients from inside network to the firewall

Adnan_Pajalic — Fri, 10 May 2019 07:53:23 GMT

Hello,

need help about how to disable VPN for clients connecting from inside network. Customer has identified that many of his users are connecting by VPN to the company altough they are in inside network 🙂 Is there any option that can be configured for firewall not to accept connections from inside , but only from outside networks ? or do i need to limit it by adding access rules.

Thanks in advance.

Re: Disable VPN for clients from inside network to the firewall

PhoneBoy — Sat, 11 May 2019 21:58:48 GMT

There's an option called Location Awareness designed to solve this exact issue.
You can start here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk43320

Re: Disable VPN for clients from inside network to the firewall

Adnan_Pajalic — Fri, 17 May 2019 08:50:13 GMT

Thanks for pointing out.

For others to know its located under global properties in smart console under Remote Access > Endpoint Connect > Network location awareness.

But it didnt't work as expected until i changed for firewall options under IPSec VPN > Link Selection and selected Calculate IP based on network topology.

Re: Disable VPN for clients from inside network to the firewall

lrossi89 — Wed, 23 Oct 2024 13:48:15 GMT

Hi,

any news about it? Has anyone found a solution?

Re: Disable VPN for clients from inside network to the firewall

PhoneBoy — Wed, 23 Oct 2024 15:12:20 GMT

Location Awareness is the canonical way to solve this problem.
Did you apply what was suggested by @Adnan_Pajalic?
If it's not working as expected, please engage with the TAC: https://help.checkpoint.com