Dynamic Split Tunneling

[SriNarasimha005]

Hi All,

We have a checkpoint firewall operating on R82 with remote access VPN functionality activated. We have set up a Full tunnel (Hub mode) with Dynamic Split tunneling (where only a few IP addresses are excluded), utilizing the object-group: exclusions_

Upon examining the route print on the user machine, we observed that a default route has been injected with the mask 252.0.0.0. Consequently, we encountered an issue where, for the proxy solution to recognize the VPN network, it must align with the strict default route of 0.0.0.0 with a mask of 0.0.0.0.

1. What steps are necessary to insert a default route with the mask 0.0.0.0?

2. Given that we have dynamic split tunneling enabled, could this lead to any connectivity problems?

Thank you in advance for your help.