topic Re: I would like disable split tunneling for vpn in SASE and Remote Access

I would like disable split tunneling for vpn

Yohan_Vaisseau — Thu, 22 Feb 2018 09:47:51 GMT

I installed the client vpn check point mobile and I wish that the internet flows through the vpn

Re: I would like disable split tunneling for vpn

G_W_Albrecht — Thu, 22 Feb 2018 10:49:12 GMT

See sk111995: You have to set Hub Mode / Route all traffic to gateway in Global Properties -> Remote Access -> Endpoint Connect -> Route all traffic to gateway -> set to "Yes"

Re: I would like disable split tunneling for vpn

Gaurav_Pandya — Thu, 22 Feb 2018 12:21:45 GMT

Yeah. That is correct what Gunther has suggested. It is best way.

Also you can try with enabling option "VPN Tunneling" on Endpoint client agent itself. but it is manual task.

If you are using SSL VPN with Mobile access blade then follow below procedure to route all traffic to gateway.

https://community.checkpoint.com/message/12386-mobile-access-default-route

Re: I would like disable split tunneling for vpn

Omar_Khalif — Mon, 25 Mar 2019 11:12:58 GMT

Hi,

checkpoint vpn tunneling greyed out ? How do I get this ungreyed out ?

Re: I would like disable split tunneling for vpn

Maarten_Sjouw — Mon, 25 Mar 2019 12:13:01 GMT

It is grayed out when it is controlled by the gateway.

Re: I would like disable split tunneling for vpn

marimcuri — Tue, 30 Jul 2019 15:00:52 GMT

Hi Omar,

Did you get any solution? I'm facing same issue in MacOS. For Windows I already saw some workarounds however not applicable for Mac.

Re: I would like disable split tunneling for vpn

Basilio_Alcant1 — Fri, 10 Jan 2020 16:02:12 GMT

Hi Guys,

can somebody tell me how to change this on the endpoint? we would like to turn on split tunneling only for one endpoint for testing purposes without changing this for everybody via Global Properties.

Thank You,

Basilio Alcantara

Re: I would like disable split tunneling for vpn

Yatiraj_Panchal — Fri, 10 Jan 2020 16:25:54 GMT

Hi,

Yes, you can this. Follow the below step:

Global Properties --> Remote Access --> Endpoint Connect --> Route all traffic to gateway --> set to "Yes"

Re: I would like disable split tunneling for vpn

Basilio_Alcant1 — Fri, 10 Jan 2020 16:31:18 GMT

I would like to modify it on the endpoint client for a machine manually , not on global properties since that will be a global change that affects all firewalls hosting remote acccess.

Re: I would like disable split tunneling for vpn

Lari_Luoma — Sat, 11 Jan 2020 21:58:35 GMT

Global Properties - Remote Access End Pont Connect select the following option.

Route All Traffic to GW: Configured on endpoint client

Re: I would like disable split tunneling for vpn

Alex_Alborzfard — Thu, 20 May 2021 15:05:59 GMT

After enabling this, can't access anything outside, only internal. Do we need to enable NAT for the Office Mode subnet, in order to be able access outside?

Re: I would like disable split tunneling for vpn

Ilovecheckpoint — Mon, 31 Mar 2025 14:37:12 GMT

Hello,

once "Route all traffic to gateway" is set to YES, is the VPN domain configured in the remote access community checked, or is it treated as if the VPN domain is set to "All Internet"? In other words, if I select this option to YES and the VPN domain for remote access is set to only internal IP addresses, is all traffic still forced through the gateway, without considering the VPN domain setting?

Re: I would like disable split tunneling for vpn

PhoneBoy — Mon, 31 Mar 2025 15:34:27 GMT

Assuming you don't leave this as a "client decide" option to configure, you are correct.