topic Re: Local network gets disconnected when connected to VPN in SASE and Remote Access

Local network gets disconnected when connected to VPN

CheckPointUser4 — Wed, 30 Nov 2022 12:46:33 GMT

Hello,

I am experiencing an issue with my local network getting disconnected when connected to VPN. Any explanation/ fix would be much appreciated

I read about enabling split tunnelling on the VPN, would this be a possible solution? If so, could someone explain the process/how to configure this?

Thanks in advance

Re: Local network gets disconnected when connected to VPN

PhoneBoy — Wed, 30 Nov 2022 14:07:39 GMT

“Route all traffic” is a setting controlled by the administrator of the site you are connected to, generally speaking.
If the admin has defined this as something you can control, there will be a checkbox you can disable in the site definition.

There is also a setting (again controlled by the administrator) to exclude the local networks from this: exclude_local_networks_in_hub_mode
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk75221

Outside of those two settings, the only way you might be able to fix this would be to manually manipulate the routing table on your client after you connect to the VPN.

Re: Local network gets disconnected when connected to VPN

_Val_ — Wed, 30 Nov 2022 14:09:32 GMT

Did you try searching the community before asking? There are plenty of discussions where your question is already answered, for example https://community.checkpoint.com/t5/Remote-Access-VPN/Split-Tunnel/td-p/34675

Re: Local network gets disconnected when connected to VPN

the_rock — Wed, 30 Nov 2022 14:24:55 GMT

Thats valid question and as the guys said, its all about split tunnel. So, to put it in layman's terms, it works like this:

FULL TUNNEL - works in a way where say users connect via remote access VPN, their Internet traffic will go through the firewall as well. Now, while this does protect the user, most companies prefer not to do this, as it puts more load on the firewall and they dont wish to need to put more resources to make sure Internet browsing from user side is in check with what company's policy

SPLIT TUNNEL - works in a way where users connect to access ONLY corporate resources and their Internet traffic goes via their own ISP home provider (always preferred method, regardless what vendor you use)

Now, as @_Val_ and @PhoneBoy mentioned, settings you need are below, I pointed them out and IF they are unchecked, it means it would be split tunnel.

If you select what I pasted, then it will do split tunnel and you wont have any issues. Let us know if you need more clarification.

Good reference article:

https://nordlayer.com/features/vpn-split-tunneling/

Cheers,

Andy

Re: Local network gets disconnected when connected to VPN

G_W_Albrecht — Wed, 30 Nov 2022 15:49:35 GMT

Check if the Remote site has the same local network (e.g.192.168.x.y) in use as you do ! Saw this with local printers that are only reachable if RA VPN is disconnected.

Re: Local network gets disconnected when connected to VPN

CheckPointUser4 — Wed, 30 Nov 2022 16:00:40 GMT

Thanks for your response, this is very helpful info. I will reach out to the admin with these suggestions and will update when the issue is resolved!

Re: Local network gets disconnected when connected to VPN

CheckPointUser4 — Wed, 30 Nov 2022 16:02:48 GMT

Hi Andy, I appreciate you taking the time to explain this so clearly. I have passed on this info and fingers crossed will have the issue resolved by tomorrow. Thanks again.