topic Re: how to have split tunnel RAS on an 1800 with one URL accessed via the firewall in SASE and Remote Access

how to have split tunnel RAS on an 1800 with one URL accessed via the firewall

LazarusG — Thu, 01 May 2025 13:54:01 GMT

The requirement is;

1) home users break out locally for internet

2) they access LAN resources using office mode RAS

3) one URL needs to be access from the public ip of the firewall.

4) it an 1800SMB

I assumed that if we could add a host entry to the endpoint we could make it resolve to an IP in our encdom then potentially use a nat rule with an fqdn in the destination (sk167194) to forward it on.

I wondered also about using a Secureremote DNS object, but dont think the 1800 likes that.

I wonder if I'm over thinking or just missing a better way of doing this (if its possible at all).

Thanks.

#edit#

i forgot to say its centrally managed via smart-1 cloud

Re: how to have split tunnel RAS on an 1800 with one URL accessed via the firewall

the_rock — Thu, 01 May 2025 14:49:34 GMT

Not sure if what I posted below would be relevant here...

Andy

https://community.checkpoint.com/t5/Remote-Access-VPN/Domain-objects-in-remote-access-vpn-domain/m-p/246249#M12365

Re: how to have split tunnel RAS on an 1800 with one URL accessed via the firewall

LazarusG — Thu, 01 May 2025 16:33:09 GMT

that looks interesting - thank you.

Re: how to have split tunnel RAS on an 1800 with one URL accessed via the firewall

the_rock — Thu, 01 May 2025 16:35:27 GMT

No worries. I know wording is little convoluted, since it HAS TO start with exclusions_ and then you can add whatever else to it, but it does work.

Keep in mind, it ONLY applies on split tunnel, not full.

Andy

Re: how to have split tunnel RAS on an 1800 with one URL accessed via the firewall

LazarusG — Fri, 02 May 2025 09:52:59 GMT

Ah thanks - looks like its also in sk167000?

I think this is the opposite of what I am trying to do - this seems to allow the client to break out locally for defined services.

What I need is for one URL to go up the tunnel so its accessed from the gateway.

Appreciate the response though: thanks.

Re: how to have split tunnel RAS on an 1800 with one URL accessed via the firewall

the_rock — Fri, 02 May 2025 11:09:56 GMT

Ah, kk...Isee. In that case it might not be supported, sorry.

Andy