Split Tunnel vs Full Tunnel

[RemoteUser]

Hi mates,

I’d like to understand how to verify whether my Check Point client VPN is configured as full tunnel or split tunnel.
Additionally, could you please explain the main differences between these two configurations?

Thanks in advance.

[Chris_Atkinson]

You can review the split tunnel configurations as outlined in the Remote Access admin guide and compare to your setup e.g.

https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_RemoteAccessVPN_AdminGuide/Content... (other relevant topics include hub mode)

Full tunnel essentially forces all traffic back to the gateway and out to the Destination / Internet.

This may improve security at the expense of performance/latency depending on the presence of other mitigating controls of course.

[RemoteUser]

Hi @Chris_Atkinson 
thank you very much.

Could you please let me know how I can verify whether my firewall is configured for full tunnel or split tunnel?
Where exactly should I check this setting?

[the_rock · Accepted solution]

Hey brother,

Here it is, Personally, I would always go with split tunnel, rather than full, but some companies may have different requirements. Here is why I say that. So, with full tunnel, as Im sure you know, all users' traffic will go through the firewall, so though its all visible to fw admins, it puts additional load on it. With split tunnel, if users choose to visit bad websites, well, we are adults, its their choice, but then at least it would go through their ISP link.

Hope that makes sense.

  

[RemoteUser]

Thanks Andy, that makes perfect sense. However, I checked now and see that in the global properties it is set to no, but in remote access for VPN clients it is selected, so it is enabled in "allow".
Does that mean I'm in split or full mode? Sorry, I'm a little confused... thanks, bro.

[the_rock]

If its disabled in global properties, then its split mode.

[RemoteUser]

thk as usual buddy 

[the_rock]

Any time buddy.