topic split tunnel vpn traffic not working in SASE and Remote Access

split tunnel vpn traffic not working

nflnetwork29 — Thu, 23 Feb 2023 17:06:57 GMT

when i check route print on my windows PC I can see the proper routing entry that should be sending traffic over the checkpoint vpn . However, when i run any traceroute it looks like the traffic is going out my internet connection. what am i missing?

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.172.253.1 10.172.253.63 35
10.54.0.0 255.255.128.0 172.16.10.2 172.16.10.1 1
10.172.253.0 255.255.255.0 On-link 10.172.253.63 291

C:\>tracert 10.54.152.200

Tracing route to 10.54.152.200 over a maximum of 30 hops

1 3 ms 2 ms 2 ms 10.172.253.1
2 1 ms <1 ms <1 ms ^C
C:\>

Re: split tunnel vpn traffic not working

the_rock — Thu, 23 Feb 2023 17:25:05 GMT

Make sure below options are enabled, as that will force all traffic via the CP firewall and NOT your ISP. If they are disabled, like in my case, that counts for split vpn tunnel.

Andy

Re: split tunnel vpn traffic not working

nflnetwork29 — Thu, 23 Feb 2023 17:33:04 GMT

i don't want all traffic to go thru the checkpoint only the networks defined in my encryption domain.

Re: split tunnel vpn traffic not working

the_rock — Thu, 23 Feb 2023 17:34:12 GMT

Fair enough...can you ensure those options are disabled then?

Andy

Re: split tunnel vpn traffic not working

nflnetwork29 — Thu, 23 Feb 2023 17:39:24 GMT

still not working. something buggy going on.

Re: split tunnel vpn traffic not working

nflnetwork29 — Thu, 23 Feb 2023 17:57:39 GMT

its working now. thanks,

Re: split tunnel vpn traffic not working

the_rock — Thu, 23 Feb 2023 17:58:57 GMT

Anything changed or was it just PC you were testing from?

Re: split tunnel vpn traffic not working

nflnetwork29 — Thu, 23 Feb 2023 18:04:05 GMT

subnetting mishap lol on the enc domain .

Re: split tunnel vpn traffic not working

the_rock — Thu, 23 Feb 2023 18:05:20 GMT

it happens 🙂