topic Re: Checkpoint VPN Client can't not access to gateway with split-tunnel mode in SASE and Remote Access

Checkpoint VPN Client can't not access to gateway with split-tunnel mode

kaka — Thu, 19 Dec 2024 09:00:47 GMT

Hi mates,

I just noticed that when we configure RAVPN as split-tunnel mode, the VPN client can't access SG, both SSH and WebUI.

The routing and specifying vpn domain should be okay because it's contained in the subnet.

We don't see the mgmt/LAN IP of the gateway on the route table on the VPN client.

Have any guys faced the same issue as me?

Regard,

Re: Checkpoint VPN Client can't not access to gateway with split-tunnel mode

PhoneBoy — Thu, 19 Dec 2024 18:58:31 GMT

The gateway should be part of the encryption domain automatically.
Having said that, it can be removed from it either by .def file hacks or via SmartConsole from R81.20:

Re: Checkpoint VPN Client can't not access to gateway with split-tunnel mode

the_rock — Thu, 19 Dec 2024 20:10:55 GMT

Make sure rule is there and also verify below is indeed right.

Andy

Re: Checkpoint VPN Client can't not access to gateway with split-tunnel mode

kaka — Fri, 20 Dec 2024 02:02:56 GMT

Hi @the_rock,

It's still not working. even a re-initial VPN connection.

Re: Checkpoint VPN Client can't not access to gateway with split-tunnel mode

kaka — Fri, 20 Dec 2024 02:05:29 GMT

Hi @PhoneBoy

We defined the encryption domain and included the gateway as well.

Re: Checkpoint VPN Client can't not access to gateway with split-tunnel mode

the_rock — Fri, 20 Dec 2024 02:09:16 GMT

K, so we need more details. How did you configured what @PhoneBoy and I asked about? Can you send some screenshots? Just blur out any sensitive details.

Also, what does the rule look like for remote clients access?

Andy

Re: Checkpoint VPN Client can't not access to gateway with split-tunnel mode

the_rock — Fri, 20 Dec 2024 12:03:44 GMT

I uploaded a short video of what I was referring to.

Andy

(view in My Videos)