topic split tunneling checkpoint vpn client in SASE and Remote Access

split tunneling checkpoint vpn client

Alejogoci — Thu, 21 Jul 2022 22:04:56 GMT

best regards
I want to know if I can force users who connect via vpn they can only browse the internet if they are connected to the vpn and if they are not connected they cannot browse

Re: split tunneling checkpoint vpn client

PhoneBoy — Mon, 25 Jul 2022 19:00:18 GMT

It can be done with the full Endpoint client, yes.
See: https://sc1.checkpoint.com/documents/R81.10/SmartEndpoint_OLH/EN/Topics-EPSG/FirewallSource.html?tocpath=Firewall%7C_____8

Re: split tunneling checkpoint vpn client

Alejogoci — Tue, 26 Jul 2022 15:29:39 GMT

Thank you very much for the answer, the client does not have an Endpoint. you can in another way

Re: split tunneling checkpoint vpn client

PhoneBoy — Tue, 26 Jul 2022 18:18:33 GMT

If you're not using the full Endpoint suite, you can create a Desktop Policy in SmartConsole.
The Desktop Firewall feature needed to support this requirement requires one of the following licenses:

Harmony Endpoint (any of the current packages should work)
ACCESS licenses (CPEP-ACCESS SKUs)
Legacy SecureClient licenses

The instructions can be found in the Managing Desktop Firewalls section of the Remote Access Clients doc: http://downloads.checkpoint.com/dc/download.htm?ID=60345

Re: split tunneling checkpoint vpn client

Alejogoci — Thu, 28 Jul 2022 15:24:05 GMT

best regards
Thanks for your help, the information is very useful.