VPN Remote Access Behind NAT

Gary_Torrico1 — Tue, 24 Apr 2018 23:41:30 GMT

Hello Guys.

I have problems when implementing remote access behind NAT. I have the following configuration:

ClusterXL Active-Backup.
ISP Redundacy - Ative Backup.
Link Selection - Calculate IP based on network topology.

Currently firewalls work with private IPs on the external interfaces. I have a router that performs NAT 1-1 from the IP public to the private IP of the firewall.

The solution works very well, but when I try to connect with Check Point Mobile via VPN remote Access to IP Public it is successful. But when I try to connect for the second time, the Check Point Mobile agent changes the public IP to a private IP of the Cluster and the connection is not completed.

When I connect to CAPSULE VPN, everyone is successful, also when I make the second attempt. CAPSULE VPN there are no problems.

Now try to configure all the options of Link SELECTION but the only one that works successfully is the option "Staticaly NATed IP". But this option is limiting since it only allows you to put a NATed IP, since I am working with two ISP "ISP REDUNDANCY".

Please can you tell me how I can solve the IP change problem at Check Point Mobile.

Thank you,

Re: VPN Remote Access Behind NAT

PhoneBoy — Wed, 25 Apr 2018 00:47:39 GMT

It doesn't appear this is supported currently.

Refer to: Endpoint Security VPN clients ignoring probing settings configured under Link Selection on Security Gateway

Re: VPN Remote Access Behind NAT

jlcasais — Wed, 09 Jun 2021 14:49:17 GMT

Hi there,

Im facing some issue. Did you already solve your problem?

Thanks in advice

topic Re: VPN Remote Access Behind NAT in SASE and Remote Access

VPN Remote Access Behind NAT

Re: VPN Remote Access Behind NAT

Re: VPN Remote Access Behind NAT