topic How to allow VPN client setup from the local LAN? in Spark Firewall (SMB)

How to allow VPN client setup from the local LAN?

mt11 — Tue, 20 May 2025 07:16:35 GMT

Hello,

I'm a newbie to Checkpoint firewalls (my background is Sonicwalls and Sophos), and we have inherited a Quantum Spark 1570. With the current setup we can't set up remote access VPN on a client computer form the local LAN as it is being blocked. How can I open this up?

Thanks,

Mark.

Re: How to allow VPN client setup from the local LAN?

_Val_ — Tue, 20 May 2025 09:36:40 GMT

We need way more information to help you out. Could you please elaborate on what you want to do, and also add some details about drop logs, policy details, software version of the FW?

Re: How to allow VPN client setup from the local LAN?

PhoneBoy — Tue, 20 May 2025 13:34:09 GMT

We need to know more details about what you did and the exact errors you received.
Screenshots might also be useful.

Re: How to allow VPN client setup from the local LAN?

G_W_Albrecht — Wed, 21 May 2025 09:59:05 GMT

Usually, RA VPN is used to connect from outside (Internet), not from internal networks / local LAN - so we have a special parameter in Advanced Settings:

VPN Remote Access - Auto-disconnect in VPN domain
bool
default value: true
Indicates if the client disconnects automatically to save resources when it connects from inside the secured internal network (local encryption domain)

As the default is to disconnect RA VPN when located in the local encryption domain, you have to change this to false to be able to connect successfully !

Re: How to allow VPN client setup from the local LAN?

G_W_Albrecht — Thu, 22 May 2025 11:36:04 GMT

Did you try my suggestion yet?