topic Re: Different VPN access for different countries users connect from. in SASE and Remote Access

Different VPN access for different countries users connect from.

doom — Wed, 17 Dec 2025 15:20:29 GMT

Good afternoon! We have many VPN users connecting from different countries. We currently need to restrict VPN access based on the user's country of origin.

For example, if a user connects from the US, they have access to everything, but if they connect from Afghanistan, they only have web access to the corporate portal.

Is there a way to implement this? 7000 Appliance R82.

Re: Different VPN access for different countries users connect from.

the_rock — Wed, 17 Dec 2025 15:26:07 GMT

See if the post I made about it last year helps.

https://community.checkpoint.com/t5/Remote-Access-VPN/Geo-VPN-blocking/m-p/214040#M10593

Re: Different VPN access for different countries users connect from.

PhoneBoy — Wed, 17 Dec 2025 16:18:53 GMT

Not aware of a way to achieve this on Quantum Security Gateways currently.
However, Harmony SASE can do this.

Re: Different VPN access for different countries users connect from.

doom — Thu, 18 Dec 2025 06:43:47 GMT

thank you for the reply. Its not what we want to achive but yes its good workaround solution. It's okay to change kernel settings yourself, we won't lose tech support?

Re: Different VPN access for different countries users connect from.

G_W_Albrecht — Thu, 18 Dec 2025 11:28:07 GMT

Should be safe if you first test it on-the-fly to make it permanent if it’s successful, see the relevant SKs fir advice!