topic Re: Enable remote access VPN for specific gateway in SASE and Remote Access

Enable remote access VPN for specific gateway

socteam_gsi — Sat, 24 Oct 2020 09:37:02 GMT

Hello,

We wanted to enable Split tunneling on one single gateway so we disable hub mode on global properties and enabled hub mode on gateways where split tunneling was not required. This leaves only single gateway where we disabled hub mode locally.

Now our problem is somehow split tunneling is now enable on every gateway even though locally hub mode is enabled. can someone help us here?

Re: Enable remote access VPN for specific gateway

PhoneBoy — Sat, 24 Oct 2020 19:26:21 GMT

There are two settings required for hub mode:

The Global Properties setting, which forces it on the client.
The gateway setting, which makes a particular gateway eligible to receive Internet-bound traffic.

If you disable the Global Properties setting, it applies to all gateways managed by that management, meaning: no hub mode at all.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk101239&partition=Advanced&product=IPSec