topic Endpoint VPN and auto connect in SASE and Remote Access

Endpoint VPN and auto connect

Johan_Rudberg — Fri, 15 Mar 2019 12:25:38 GMT

Does the endpoint vpn have a function to auto connect to the gateway once the user brings their client computer home and connect it to the Internet?

Re: Endpoint VPN and auto connect

PhoneBoy — Fri, 15 Mar 2019 13:28:31 GMT

You have to configure Location Awareness, I believe.

Re: Endpoint VPN and auto connect

Wolfgang — Fri, 15 Mar 2019 13:33:44 GMT

There is an option in the client configuration

Re: Endpoint VPN and auto connect

Yasser_Said — Fri, 03 Jan 2020 13:45:08 GMT

Hello everyone,

Is there any automated way to disable auto connect in Endpoint VPN Version 81.10. I know this can be done manual, but I need to disable the auto connect in the MSI EPS.MSI. In the past with old version I used to use the adminmode then I can manipulate the MSI as I want. The autoconnect is causing users issues when they are connected to the network from the office.

Re: Endpoint VPN and auto connect

Kathleen_Murphy — Tue, 14 Jan 2020 21:14:39 GMT

I am having this issue as well.

Re: Endpoint VPN and auto connect

Johannes_Schoen — Fri, 17 Jan 2020 12:11:07 GMT

Hi @Wolfgang :

do you know, where I can set this check box for all the clients?

We want it to be disabled, but setting it in trac.ttm endpoint_vpn_always_connected doesn't help - this parameter is not present in the local trac.config with E82.10

Best Regards
Johannes

Re: Endpoint VPN and auto connect

Chris_Atkinson — Fri, 17 Jan 2020 13:01:25 GMT

Note the following "global property" also please have a look at the following SK to see if it meets your requirements.

sk108982: How to disable the default 'Always-Connect' on Endpoint Security / VPN Clients before deployment

Re: Endpoint VPN and auto connect

Marcos_Vieira — Mon, 17 Aug 2020 15:48:32 GMT

There is an option called "Disconnect client when getting an IP from a VPN domain". See it in "https://community.checkpoint.com/t5/Remote-Access-VPN/Endpoint-VPN-and-auto-connect/td-p/47055". I think it will solve the problem when the users are inside the office.

Re: Endpoint VPN and auto connect

Dominik_E — Tue, 18 Aug 2020 06:20:39 GMT

or you recreate the MSI and redeploy it to all clients. You can modify the client by the trac config file and there is an option for always connect.

Re: Endpoint VPN and auto connect

Sanjay_S — Tue, 08 Nov 2022 15:53:47 GMT

Hi Chris,

If i change the change the connect mode to Manual then how does it work? I went through the below link but did not get much clarification on this.

https://downloads.checkpoint.com/fileserver/SOURCE/direct/ID/8631/FILE/CP_NGX_R65.4_(HFA40)_Endpoint_Connect_AdminGuide.pdf

Manual

Always Connect

Configured on Endpoint

Need to get more clarification on these 3 options.

Re: Endpoint VPN and auto connect

PhoneBoy — Tue, 08 Nov 2022 17:15:42 GMT

Manual means no auto-connection to VPN is possible.
Always Connect means the gateway forces the client to always be connected via VPN.
Configured on Client means the end user can (optionally) configure the option to be always connected via VPN.

Re: Endpoint VPN and auto connect

Sanjay_S — Mon, 14 Nov 2022 11:58:10 GMT

Thats great then i can go with the Manual Option 🙂

Thanks PhoneBoy.