Endpoint Remote Access VPN-disable auto connect

Cathy_Cheng — Wed, 01 Jul 2026 13:39:04 GMT

The setting under Global Properties > Remote Access > Endpoint Connect > Connect Mode is configured as Manual.

The :neo_always_connected parameter in trac_client_1.ttm is set to client_decide.

However, in the Endpoint Security client, under VPN Site Properties > Settings, the Enable Always Connect option is still enabled (ticked). Where is the setting to disable this?

I'm also a little confused about how these settings interact. It appears that Always Connect can be configured in multiple places:

Global Properties > Remote Access > Endpoint Connect > Connect Mode
The trac_client_1.ttm file (:neo_always_connected)

What is the order of precedence between these settings? Which configuration takes effect if they are set differently?

Re: Endpoint Remote Access VPN-disable auto connect

simonemantovani — Wed, 01 Jul 2026 13:48:24 GMT

I have always worked on the trac_client_1.ttm file, this is the configuration file that the VPN clients take into consideration; most of the settings are usually managed through this file.

https://sc1.checkpoint.com/documents/RemoteAccessClients_forWindows_AdminGuide/Content/Topics-RA-VPN-for-Win/Editing-TTM-File.htm?tocpath=The%20Configuration%20File%7C_____1

topic Re: Endpoint Remote Access VPN-disable auto connect in SASE and Remote Access

Endpoint Remote Access VPN-disable auto connect

Re: Endpoint Remote Access VPN-disable auto connect