topic How to disable split tunneling for some users while enabling it for other users in SASE and Remote Access

How to disable split tunneling for some users while enabling it for other users

Louis_Poulin — Thu, 12 Jul 2018 20:37:54 GMT

Setup is R80.10 in VSX, two gateways in cluster, VSLS. One VS is acting as the VPN gateway.

I need to disable split tunneling for some users. So I need to route all traffic to the gateway for them.

But I also need to allo split tunneling for other users.

I need to force this settings; I don't want to let users decide or configure it on the client.

VPN clients used are either Capsule VPN running on Windows 10, or Remote Access VPN client for Windows.

Thanks!

Re: How to disable split tunneling for some users while enabling it for other users

PhoneBoy — Fri, 21 Jun 2019 09:00:08 GMT

This was discussed in https://community.checkpoint.com/message/20006-re-exclude-subnet

The relevant SK: Remote Access clients configuration based on group membership

Re: How to disable split tunneling for some users while enabling it for other users

Nikolaos_Liakop — Thu, 18 Apr 2019 11:02:47 GMT

Hi, I followed the aforementioned sk114882 and it did not work for me.

Our setup is the following: r80.20m2 manager which is a vm and 2 physical appliances running r80.10.

I followed the exact same procedure in order to disable split tunneling (ie route all traffic via the gateway) on a Checkpoint group named "ttm_finance". I did the changes on the relevant config (finance.ttm) which resides both on the manager as well as the gateways under $FWDIR/conf directory

Whenever I initiate a client2site vpn connection with a user who belongs to "ttm_finance" , I cannot see the extra default route on my PC.

Obviously there's something I am missing...

Any guidance should be appreciated.

Thanks in advance.