topic Re: Remote access user not able to access Branch office(s) network in SASE and Remote Access

Remote access user not able to access Branch office(s) network

ThabEugS — Tue, 02 Jul 2024 20:12:00 GMT

Good Day

I have a setup where my mobile access users through secure remote are not able to access other subnets/branches.

My setup is Remote Access VPN User >Firewall>Internal Network >Branch Offices

The remote access VPN users are not able to access subnets at Branch office which connect to the head office through MPLS there are not firewalls at the branch offices and they breakout through the HQ/HO where the vpn firewall is for internet access.

Regards

Re: Remote access user not able to access Branch office(s) network

Alex- — Wed, 03 Jul 2024 06:45:10 GMT

You need to make sure the remote offices are included in your Remote Access encryption domain and your Office Mode or any relevant NAT you would use is routed back in your MPLS and LAN to the firewall.

Re: Remote access user not able to access Branch office(s) network

PhoneBoy — Wed, 03 Jul 2024 16:20:24 GMT

Are the Branch Offices available over a Site-to-Site VPN?
Those networks needs to be included in the Encryption Domain.
If you're actually using SecuRemote (instead of Check Point Mobile or Endpoint Security VPN), you will also need to configure IP Pool NAT.