topic Re: How to restrict the dial-in IP only on WAN IP for remote access users in SASE and Remote Access

How to restrict the dial-in IP only on WAN IP for remote access users

Huaming — Fri, 30 Apr 2021 03:51:21 GMT

Hi, I have a question about the remote access on checkpoint 5400. The function works well. but I found internal users in all subnets can access remote-access VPN by dial-in their subnet gateway in this firewall. Can I restrict the remote access function only on WAN interface, at other ports, it can't dial in.

Thanks for your help in advance.

Re: How to restrict the dial-in IP only on WAN IP for remote access users

G_W_Albrecht — Fri, 30 Apr 2021 08:05:00 GMT

Try GW object > VPN clients > Remote Access > Support Visitor Mode > Machine´s Interface

Re: How to restrict the dial-in IP only on WAN IP for remote access users

Huaming — Thu, 06 May 2021 07:17:12 GMT

THanks for your kindly help.