topic Re: Prevent route learning over VPN in SASE and Remote Access

Prevent route learning over VPN

MarcuzShinz — Fri, 26 Jul 2024 12:05:01 GMT

Dear Guy!

I am having a rather confusing issue that when the client connects to VPN remote access it automatically adds some routes, when I show route print via CMD on windows client.
How to turn off this automatic route learning?

Re: Prevent route learning over VPN

PhoneBoy — Fri, 26 Jul 2024 12:47:16 GMT

By design, all networks specified in the Remote Access encryption domain are sent to the client.
The only option is to remove such networks from the encryption domain.

Re: Prevent route learning over VPN

the_rock — Fri, 26 Jul 2024 13:24:16 GMT

I am pretty positive what @PhoneBoy said has been the same way since the beginning of Check Point.

Andy

Re: Prevent route learning over VPN

MarcuzShinz — Fri, 26 Jul 2024 13:28:51 GMT

Do you mean the networks I use for Remote Access Communities?

Re: Prevent route learning over VPN

PhoneBoy — Fri, 26 Jul 2024 18:03:51 GMT

Yes.

Re: Prevent route learning over VPN

the_rock — Sat, 27 Jul 2024 12:14:00 GMT

Thats right, so as Phoneboy had said, its whats present in vpn domain specifically used for remote access ONLY. You can easily modify that via gateway (cluster) object in smart console, network management -> vpn domain, then edit it there, save, install policy, test. Just have clients disconnect/reconnect after policy is pushed.

Andy