topic Re: How do I connect my branch office to cloud using Harmony connect Branch office option? in SASE and Remote Access

How do I connect my branch office to cloud using Harmony connect Branch office option?

Blason_R — Thu, 28 Apr 2022 06:35:35 GMT

Hi Team,

I am setting up Harmony connect Branch office option. My DC range is 192.168.15.0/24 and branch 10.124.1.0/24

I setup two vpn from my branch and rest of the settings configured successfully on Portal.

I have few doubts though -

I am still wondering what should be my local and remote encryption domains on branch end routes while setting up tunnel?
I have configured the tunnel with 192.168.15.0/24 and local prefix as 10.124.1.0/24.
I can ping to the remote IP as suggested on portal
However I am not able to reach to 192.168.15.0/24 to my servers.

Am I doing anything wrong?

Re: How do I connect my branch office to cloud using Harmony connect Branch office option?

Chris_Atkinson — Thu, 28 Apr 2022 07:07:52 GMT

What device is the branch office using out of interest?

Re: How do I connect my branch office to cloud using Harmony connect Branch office option?

Blason_R — Thu, 28 Apr 2022 07:46:00 GMT

Thats Generic Router or Vyatta device. My Ipsec is connected successfully without any issues.

Re: How do I connect my branch office to cloud using Harmony connect Branch office option?

vinceneil666 — Tue, 10 May 2022 10:27:43 GMT

Hi,

The main issue with Harmony Connect is the connection to the DC. Even tough you have an IPSEC to the DC - you will not be able to route everything over the tunnel, you need to use defined applications... And these applications are limited to HTTP/s, RDP and SSH ..and a few more. Go look at the "Assets" and "Appløication sites" - the application site is pretty much your datacenter, and then you need to add applications to it...

You would think that the clients would be able to reach the DC ip addresses, but this is not possible. I spent hours figuring this out - and when asking Check Point when we would be able to tunnel all traffic over to the on-prem DC, they told med q4 2021 - but that did not happen.. Now they are saying q4 2022 - but I have still not seen av roadmap that verifies this.

Harmony connect is pretty much useless if you ask me 🙂 .. That is maybe a bit harsh, but.. yeah : )