topic Re: Use VPN for specific sites, on Mac in SASE and Remote Access

Use VPN for specific sites, on Mac

PKSpeleo — Thu, 14 Jan 2021 14:36:44 GMT

Hello!
I am using Endpoint Security VPN on my Mac to get access to the internal network for my work.
But in the internal network, i can't reach external resources from the internet.
Is it possible to use Endpoint Security VPN only for specific resources and all others without VPN?
Thanks for your support.

Re: Use VPN for specific sites, on Mac

_Val_ — Thu, 14 Jan 2021 14:47:17 GMT

Yes it is possible, but you cannot configure it on the client side. Instead, your IT team has to change VPN parameters

Re: Use VPN for specific sites, on Mac

PKSpeleo — Thu, 14 Jan 2021 14:48:51 GMT

Thanks for the answer!
But maybe I can do it by route on my machine command or another way?

Re: Use VPN for specific sites, on Mac

_Val_ — Thu, 14 Jan 2021 14:51:05 GMT

I do not think so

Re: Use VPN for specific sites, on Mac

PKSpeleo — Thu, 14 Jan 2021 15:19:47 GMT

So sad =(
It is a special security feature?

Maybe I can use OpenVPN client that can be configured?

Re: Use VPN for specific sites, on Mac

_Val_ — Thu, 14 Jan 2021 15:30:06 GMT

Yes, it is a security feature. If your company wants to force employees to go through centra VPN site, users should not be able to override that.
You have to raise this with your IT admins, it is most probably something they can change.

Not sure I understand your question about OpenVPN. If you mean using it for corporate VPN access, once again, refer to your IT guys.

Re: Use VPN for specific sites, on Mac

PKSpeleo — Thu, 14 Jan 2021 15:45:58 GMT

Thanks for your answers!
Can I use 3rd party clients like openVpn instead of Endpoint Security VPN?

Re: Use VPN for specific sites, on Mac

_Val_ — Thu, 14 Jan 2021 15:56:09 GMT

In general sense, yes, you can use different types of VPN clients on Mac. Once more, it depends on your needs, corporate policy and specific user case, which is still unclear here.

Re: Use VPN for specific sites, on Mac

Ricki_Juntak — Tue, 30 Nov 2021 02:13:49 GMT

Hi Val,

I have some case on customer they using openvpn behind Checkpoint: server(using openVPN)-> Checkpoint Gateway->AWS, but the traffic rejected by Checkpoint.

can checkpoint allow traffic openvpn, except using the application control blade?