topic Re: Change Network Adapter Securemote VPN in SASE and Remote Access

Change Network Adapter Securemote VPN

Icaro_IT — Fri, 23 Aug 2024 17:41:54 GMT

hello

How can I change the network adapter that the checkpoint uses on the secu remote?

By default it is receiving the same IP as my Wi-Fi adapter, but I would like it to receive the IP from another adapter

Re: Change Network Adapter Securemote VPN

PhoneBoy — Fri, 23 Aug 2024 18:01:17 GMT

Not sure I follow.
Please provide a specific example (with screenshots).

Note that if this truly SecuRemote, the IP address assigned on the client is only used for routing traffic across the VPN.
According to this, it appears to be influenced by the Office Mode configuration: https://community.checkpoint.com/t5/Remote-Access-VPN/Why-SecuRemote-gets-always-the-same-IP-address/m-p/83637#M3275
The gateway will see your public IP address only.

Re: Change Network Adapter Securemote VPN

Timothy_Hall — Fri, 23 Aug 2024 18:31:40 GMT

Actually if the client was truly installed as SecuRemote (and not Check Point Mobile or Endpoint Security), the assignment of a virtual IP address via Office Mode is not supported at all. Reinstalling the client as Check Point Mobile will permit the use of Office Mode, but I'm pretty sure it will be limited to 5 concurrent users by the default MAB-5 license. See here: sk84560: Check Point VPN License Guide

Re: Change Network Adapter Securemote VPN

PhoneBoy — Fri, 23 Aug 2024 19:41:48 GMT

SecuRemote clients do have the virtual NIC installed just like Mobile/EPS clients.
The IP address assigned to the NIC appears to be based on the Office Mode configuration.
However, that IP is only used for routing decisions on the client and not seen on the gateway.

Re: Change Network Adapter Securemote VPN

AkosBakos — Sat, 24 Aug 2024 16:26:05 GMT

Hi @Icaro_IT

You mean that, you want to change that IP pool, which is used by Client VPN address pool?

If yes, you can change it here:

Create an unique Network for this, then change it (at 3rd point)

I hope it helps.

Ákos

Re: Change Network Adapter Securemote VPN

Icaro_IT — Mon, 26 Aug 2024 12:18:02 GMT

This only works for those with Office mode licensing.

I need this using Securemote.

Re: Change Network Adapter Securemote VPN

AkosBakos — Mon, 26 Aug 2024 12:35:56 GMT

Hi @Icaro_IT

I'm not 100% sure, it happened a long time ago. I set IP pool here (I think it van R80.10):

But this related to "Office Mode" but give a chance... Unfortunately I haven't had demo cluster yet.

Akos

Re: Change Network Adapter Securemote VPN

PhoneBoy — Mon, 26 Aug 2024 14:57:46 GMT

SecuRemote will use these IPs even if Office Mode isn't relevant (e.g. because it's SecuRemote).
By "use" I mean assign them to the relevant NIC on the client.
From the gateway perspective, the traffic will arrive from the public IP of the client.

At least that's how I understand it.