topic Re: Connected to SNX, but cannot reach internal network (server) in SASE and Remote Access

Connected to SNX, but cannot reach internal network (server)

CEEJAY — Fri, 08 May 2026 05:18:27 GMT

Hello, I am encountering an issue regarding Check Point SNX (Network Mode). I can successfully connect to SNX and get an Office Mode IP, but when I tried to ping the server and access web app in my internal network, it does not work. Does VPN Domain has something to do with this? The only policy I created is in the Mobile Access Policy by creating a Native Application and editing the targeted server.

Re: Connected to SNX, but cannot reach internal network (server)

emmap — Fri, 08 May 2026 06:02:40 GMT

What do you see in the traffic logs?

Re: Connected to SNX, but cannot reach internal network (server)

CEEJAY — Sat, 09 May 2026 06:46:03 GMT

From the logs, I think it was being dropped by the clean up rule, but I tried to add a rule src:office mode ip | dst: the server and lan | services: any | action: accept but still cannot reach the server or other resources in the lan.

Re: Connected to SNX, but cannot reach internal network (server)

emmap — Wed, 13 May 2026 01:36:37 GMT

Under Mobile Access in your gateway, is it configured to use Legacy policy or Unified policy? And where did you set up the access?

Re: Connected to SNX, but cannot reach internal network (server)

CEEJAY — Wed, 13 May 2026 02:16:54 GMT

It is configured to use legacy policy. What do you mean where did i set up the access?

Re: Connected to SNX, but cannot reach internal network (server)

emmap — Wed, 13 May 2026 02:20:47 GMT

Where did you add the access configuration? If your gateway is set to legacy policy then you'll need to add the access configuration in the old Mobile Access policy to allow SNX to connect into network resources.

Re: Connected to SNX, but cannot reach internal network (server)

CEEJAY — Wed, 13 May 2026 02:28:57 GMT

the clusterXL is running with R82 version, the rule base for mobile access is now accessible thru smart console, that is where I confgured the access rule.

Re: Connected to SNX, but cannot reach internal network (server)

emmap — Wed, 13 May 2026 03:55:11 GMT

Yes but when the gateway is configured to use the Legacy policy, you have to configure the access through the old Mobile Access GUI in the Shared Policy section. If you want it integrated into the main access policy you have to change the gateway to use Unified policy.