https://community.checkpoint.com/t5/SASE-and-Remote-Access/SMB-spark-encryption-domain-not-functioning-correctly/m-p/213523#M3809 <P>Hello everyone,</P><P>I am wondering why the Check Point SMB remote access VPN is acting this way. This gateway is running R81.10.07 (996001397)</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2024-05-07_10-35.png" style="width: 536px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/25576i836462EF9016BC9A/image-size/large?v=v2&amp;px=999" role="button" title="2024-05-07_10-35.png" alt="2024-05-07_10-35.png" /></span></P><P>The encryption domain has the following subnet in it (highlighted in red). The VPN is pushing every single IP of every single interface on the SMB gateway and the encryption domain subnet (highlighted in pink).</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2024-05-07_10-38.png" style="width: 999px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/25575iAF56123DE1EE4679/image-size/large?v=v2&amp;px=999" role="button" title="2024-05-07_10-38.png" alt="2024-05-07_10-38.png" /></span></P><P>Has anyone seen this behavior before? Maybe there is an SK that I can't find about this?</P><P>Thank you in advance,<BR /><BR />Diyaa</P> Tue, 07 May 2024 16:42:47 GMT Diyaa3791 2024-05-07T16:42:47Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/SMB-spark-encryption-domain-not-functioning-correctly/m-p/213523#M3809 <P>Hello everyone,</P><P>I am wondering why the Check Point SMB remote access VPN is acting this way. This gateway is running R81.10.07 (996001397)</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2024-05-07_10-35.png" style="width: 536px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/25576i836462EF9016BC9A/image-size/large?v=v2&amp;px=999" role="button" title="2024-05-07_10-35.png" alt="2024-05-07_10-35.png" /></span></P><P>The encryption domain has the following subnet in it (highlighted in red). The VPN is pushing every single IP of every single interface on the SMB gateway and the encryption domain subnet (highlighted in pink).</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2024-05-07_10-38.png" style="width: 999px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/25575iAF56123DE1EE4679/image-size/large?v=v2&amp;px=999" role="button" title="2024-05-07_10-38.png" alt="2024-05-07_10-38.png" /></span></P><P>Has anyone seen this behavior before? Maybe there is an SK that I can't find about this?</P><P>Thank you in advance,<BR /><BR />Diyaa</P> Tue, 07 May 2024 16:42:47 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/SMB-spark-encryption-domain-not-functioning-correctly/m-p/213523#M3809 Diyaa3791 2024-05-07T16:42:47Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/SMB-spark-encryption-domain-not-functioning-correctly/m-p/213546#M3810 <P>The gateway (including all IPs) is always included in the encryption domain by default.<BR />To disable this, see:&nbsp;<A href="https://sc1.checkpoint.com/documents/SMB_R81.10.X/CLI/EN/Content/Topics/set-vpn-site-to-site-no-local-conns-encrypt.htm" target="_blank">https://sc1.checkpoint.com/documents/SMB_R81.10.X/CLI/EN/Content/Topics/set-vpn-site-to-site-no-local-conns-encrypt.htm</A>&nbsp;</P> Tue, 07 May 2024 23:12:50 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/SMB-spark-encryption-domain-not-functioning-correctly/m-p/213546#M3810 PhoneBoy 2024-05-07T23:12:50Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/SMB-spark-encryption-domain-not-functioning-correctly/m-p/213552#M3811 <P>Thank you so much. This answers my question.</P> Tue, 07 May 2024 23:52:33 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/SMB-spark-encryption-domain-not-functioning-correctly/m-p/213552#M3811 Diyaa3791 2024-05-07T23:52:33Z