topic Re: Remote access client and local resource in SASE and Remote Access

Remote access client and local resource

lucag74 — Thu, 07 Oct 2021 09:49:10 GMT

Scenario

Notebook With client Endpoint Security --> Checkpoint Quantum Spark 1530 Appliance

Notebook connect to Checkpoint all fine, he can see the entire LAN network, i used office mode. All fine.

What i need is a bidirectional comunication. Pc on lan network to have access to one port listening on notebook.

It's possible ?

Thank's

Re: Remote access client and local resource

_Val_ — Thu, 07 Oct 2021 10:10:44 GMT

You can pit Office Mode IP for a specific user, and then yes, you can do what you need

Re: Remote access client and local resource

lucag74 — Thu, 07 Oct 2021 12:46:42 GMT

OK i put in office mode, i edited file ipassignement.conf and when i connect i receive correct ip address. Do i need to make something other because still not working.

Sorry for newbie question i'm following the user manual.

Re: Remote access client and local resource

G_W_Albrecht — Fri, 08 Oct 2021 09:09:40 GMT

You need to additionally enable Back Connections in Advanced Settings:

Re: Remote access client and local resource

lucag74 — Fri, 08 Oct 2021 08:49:11 GMT

Hi, first thank for your answer.

Yes i had already create outgoing roule, i attach screenshot. I tried also with Any instead of Lan Networks.

However i don't rebooted checkpoint after put new ipaggnignement,conf

All work fine user always receive the same ip.

Maybe something wrong on file ?

I had put

##############################################################################################
### Gateway Type IP Address User Name ###
### ============= ===== ======================================== =======================###
##############################################################################################
*, 172.16.10.5, tamponi

Re: Remote access client and local resource

G_W_Albrecht — Fri, 08 Oct 2021 12:22:01 GMT

Can we move this to Quantum Spark ?

Re: Remote access client and local resource

lucag74 — Fri, 08 Oct 2021 13:36:51 GMT

Thank's i tred to activate but nothing.

1) Office per mode use ok

2) Outgoing roule plicy to allow lan to vpn remote access.

3) Enabled back conneccion

i try to enable anti-spoofing on vpn remote access but nothing.

Re: Remote access client and local resource

AndréTinoco — Fri, 08 Oct 2021 13:51:38 GMT

Can you share the policy rule you've created?

Re: Remote access client and local resource

lucag74 — Fri, 08 Oct 2021 14:40:40 GMT

Sure, in attachment all my config

Policy Object

Ipassignmenet.conf

Connetion back

and Office mode

all in form of screenshot.

Sure i'm missing something !

Re: Remote access client and local resource

AndréTinoco — Fri, 08 Oct 2021 14:48:13 GMT

Ok.

In the policy, instead of using the Remote Access object, try to use the Office Mode IP/Network.

Re: Remote access client and local resource

_Val_ — Fri, 08 Oct 2021 15:24:11 GMT

Why?

Re: Remote access client and local resource

lucag74 — Fri, 08 Oct 2021 15:26:14 GMT

OK i solved the issue. My configuration work like screenshot.

I don't know why i can't ping my remote notebook also if windows firewall it's down but for example i can access the shared folder.

The real missing puzzle for me it's what you suggest me and i report like solutions, the allow back connection.

Re: Remote access client and local resource

AndréTinoco — Fri, 08 Oct 2021 15:39:24 GMT

The Remote Access object could not be mapping the network correctly, but I'm glad you've worked it out.

Re: Remote access client and local resource

PhoneBoy — Fri, 08 Oct 2021 16:51:13 GMT

If this were posted somewhere else, that's probably where I'd move it.
However, this deals with both topics, so I'm inclined to leave it where it is. 🙂

Re: Remote access client and local resource

PhoneBoy — Mon, 11 Oct 2021 04:53:19 GMT

For a centrally managed SMB appliance (or for non-SMB appliances), this is the correct setting in Global Properties to allow connections initiated from the LAN to Remote Access VPN clients: