topic Allow Remote Access Users to remote VPN site trought HQ Office GW in Spark Firewall (SMB)

Allow Remote Access Users to remote VPN site trought HQ Office GW

destek — Mon, 10 Jun 2019 13:01:23 GMT

Hi,

We have a Check Point 1430 Security Appliance. This device have an IPSec Tunnel to remote network (Azure). I want to permit access to remote access users (Client To Site VPN) for this remote site. I've searched for hours I can't find any solution to solve my problem. I can ping Azure servers from HQ Office LAN but I'm not able to ping from remote access computer at the moment.

Re: Allow Remote Access Users to remote VPN site trought HQ Office GW

_Val_ — Wed, 12 Jun 2019 13:51:51 GMT

Do you have Office Mode enabled for your VPN clients?

Allow Remote Access Users to remote VPN site trought HQ Office GW

G_W_Albrecht — Thu, 13 Jun 2019 07:15:49 GMT

Using an Office Mode IP that is included in the local VPN encryption domain should provide what you want - but this is standard only with CP GWs. If this was a centrally managed SMB GW, you could just use RA VPN with Hub Mode. With locally managed SMB, you will have to manually configure a local encryption domain including the networks behind the Cisco GW for remote access users: See Check Point 1400 Appliances Locally Managed Administration Guide R77.20.87 p.158 !

Re: Allow Remote Access Users to remote VPN site trought HQ Office GW

destek — Thu, 13 Jun 2019 08:55:15 GMT

Yes It's enabled

Re: Allow Remote Access Users to remote VPN site trought HQ Office GW

destek — Thu, 13 Jun 2019 08:58:51 GMT

Hi,

Yes I'm currently using Office Mode. I've checked the manual which is you pointed but I can't find how to I can create Encryption domain. The device is locally managed.

Re: Allow Remote Access Users to remote VPN site trought HQ Office GW

TJ_Aus — Thu, 28 Apr 2022 03:42:23 GMT

You may need to enable this: