topic Re: Remote VPN access for muliplte business units.. in SASE and Remote Access

Remote VPN access for muliplte business units..

Simply_sachin — Sun, 02 May 2021 16:59:57 GMT

We have mutilple branch units running with multipel checkpoint(r803.0/R81) gateways and single management servers(R81).

The question here is I should(remote access VPN) login with single location and access the all branch units and access the resources.

Techies,waiting for your inputs.

Re: Remote VPN access for muliplte business units..

PhoneBoy — Sun, 02 May 2021 17:14:39 GMT

That’s possible for sure.
I think a better question is: what is your precise objective.
From that, we can suggest the right approach.

Re: Remote VPN access for muliplte business units..

Simply_sachin — Sun, 02 May 2021 17:42:59 GMT

i dont want to connect each business unit with different/different GWs IPS..

Re: Remote VPN access for muliplte business units..

PhoneBoy — Sun, 02 May 2021 21:53:55 GMT

You configure each gateway with a unique encryption domain and use rules with Access Roles to ensure users can only access the resources they are supposed to.
However, if all the gateways are configured under a single management domain, they will appear as part of the same site and the end user will have to choose the appropriate gateway to connect to.

If this is not what you’re after, please provide more precise details about your environment and what it is you’re trying to achieve.

Re: Remote VPN access for muliplte business units..

Simply_sachin — Mon, 03 May 2021 07:44:12 GMT

Hi..As I mentioned all the BU unit GWs are in the same management server.if the end user connects single gateway and will get that respective VPN pool ip, from that he can access all the BUs resources. Currently he can access only the respective BU only..

all the locations interconnected with site to site VPN..So respective VPN pool to be included in the rule base of intersites??will it work?

Re: Remote VPN access for muliplte business units..

PhoneBoy — Mon, 03 May 2021 13:57:52 GMT

You have to do one of two things:

Include all the other BUs in the Remote Access encryption domain of one of the gateways (can work but creates extra load on that gateway with hairpinned traffic)
Enable Secondary Connect