Route Traffic through VPN Client Instead of using Site to Site VPN

Pbgt — Wed, 13 Apr 2022 00:18:34 GMT

I have a bastion host on site A that I use to access site B. There is an existing Site to Site tunnel between A and B, but I would like to use a VPN Client to connect to site B. Checkpoint FW on both sides. When I connect to site B with a VPN Client the traffic still goes through the Site 2 Site VPN.

Re: Route Traffic through VPN Client Instead of using Site to Site VPN

PhoneBoy — Thu, 14 Apr 2022 13:45:05 GMT

Is the Site B firewall managed with the same management as Site A? It needs to be.
Does Site B have a Remote Access encryption domain defined? It needs one.
Does Site A's Remote Access encryption domain include Site B? It should not.
Is Secondary Connect enabled? It should be by default, but it can't hurt to check: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk75221

You will probably have to delete and re-add the site on the client after making the above changes.

topic Route Traffic through VPN Client Instead of using Site to Site VPN in SASE and Remote Access

Route Traffic through VPN Client Instead of using Site to Site VPN

Re: Route Traffic through VPN Client Instead of using Site to Site VPN