https://community.checkpoint.com/t5/SASE-and-Remote-Access/Do-I-need-to-set-the-VPN-Community-when-using-Access-Roles/m-p/154503#M6413 <P>Hello Checkmate community,</P> <P>if I use access roles for non-VPN and VPN client users, do I need to separate them and set the VPN community to "RemoteAccess" or can they coexist in the same rule with the VPN community "any"? Currently I have them combined into one rule and it works, but I am not sure if this is best practice.</P> <P>The user identities come from the same identity source (Identity Collector).</P> <P>Thank you in advance.</P> <P>Kind regards<BR />Sascha</P> Thu, 04 Aug 2022 11:28:59 GMT sascham 2022-08-04T11:28:59Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/Do-I-need-to-set-the-VPN-Community-when-using-Access-Roles/m-p/154503#M6413 <P>Hello Checkmate community,</P> <P>if I use access roles for non-VPN and VPN client users, do I need to separate them and set the VPN community to "RemoteAccess" or can they coexist in the same rule with the VPN community "any"? Currently I have them combined into one rule and it works, but I am not sure if this is best practice.</P> <P>The user identities come from the same identity source (Identity Collector).</P> <P>Thank you in advance.</P> <P>Kind regards<BR />Sascha</P> Thu, 04 Aug 2022 11:28:59 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Do-I-need-to-set-the-VPN-Community-when-using-Access-Roles/m-p/154503#M6413 sascham 2022-08-04T11:28:59Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/Do-I-need-to-set-the-VPN-Community-when-using-Access-Roles/m-p/154654#M6414 <P>The answer is yes, if a network security rule has "Any" in the VPN tab, it will be applied to both encrypted and cleartext traffic</P> Sat, 06 Aug 2022 09:44:21 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Do-I-need-to-set-the-VPN-Community-when-using-Access-Roles/m-p/154654#M6414 _Val_ 2022-08-06T09:44:21Z