topic Re: Mobile Access Blade greyed out on Centrally Managed SMB 1600 in SASE and Remote Access

Mobile Access Blade greyed out on Centrally Managed SMB 1600

jyrbn — Wed, 16 Apr 2025 03:07:15 GMT

Hi,

We are trying to configure remote access VPN on our centrally managed SMB 1600 and are encountering an issue where the option to route all traffic to the Gateway on the Endpoint client is greyed out.

I've found an SK (sk101239) regarding this and found that there is a setting in Global Properties that needs to be configured to route all traffic from remote clients through the gateway.

Our issue is that this setting is not available to us when opening Global Properties. Check box to enable Mobile Access is also greyed out. (Image for reference)

We need to route the traffic of the remote clients through the gateway because they can only access some of our Cloud resources using the Public IP of our gateway.

Any ideas?

Re: Mobile Access Blade greyed out on Centrally Managed SMB 1600

PhoneBoy — Wed, 16 Apr 2025 03:59:22 GMT

IPsec VPN OR Mobile Access Blade supports Remote Access clients.
Mobile Access Blade is only required for the web portal, which is not supported on SMB appliances.

I just posted screenshot of the necessary settings to force Hub Mode here: https://community.checkpoint.com/t5/Remote-Access-VPN/Split-Tunnel-Domain-group/m-p/246548/highlight/true#M12389
These were taken in R81.20 Management.
Are you saying these same settings don’t exist in your management in the same place?

Re: Mobile Access Blade greyed out on Centrally Managed SMB 1600

jyrbn — Wed, 16 Apr 2025 04:21:49 GMT

The setting on the screenshot you sent is already enabled but we still can't modify VPN tunneling on the Mobile Client.

The setting that I was looking for or referring to was the one mentioned in sk101239.

In the Basic Configuration part, step 1.D.

Re: Mobile Access Blade greyed out on Centrally Managed SMB 1600

the_rock — Wed, 16 Apr 2025 04:21:51 GMT

Check out below link, it would appear its not supported for MAB. I know its for 1490, but same is valid for 1600 and 1800.

Andy

https://community.checkpoint.com/t5/SMB-Gateways-Spark/Mobile-Access-Blade-on-a-Centrally-managed-SMB-1490/td-p/76666

Re: Mobile Access Blade greyed out on Centrally Managed SMB 1600

Wolfgang — Wed, 16 Apr 2025 05:17:06 GMT

@jyrbn what you need is called hub mode. Please follow sk101239 - Route all traffic from Remote Access clients, including internet traffic, through Security Gateway You have to enable this setting under the client section you are using

Re: Mobile Access Blade greyed out on Centrally Managed SMB 1600

jyrbn — Wed, 16 Apr 2025 05:49:56 GMT

Thanks!

I was looking at the gateway object properties my mistake.