VPN

[handiansudianto]

Hello,

How we can route all internet traffic from user who connected to the VPN client, so the traffic will pass thru the checkpoint rather than the traffic goes to user local internet provider?

[the_rock · Accepted solution]

Its called hub mode. You need to enable below options and then proper rules to allow it. In other words, split VPN needs to be disabled. Please refer to below screenshots, hope it helps.

Andy

First option is in global properties and should say "yes"

 Below is on gateway properties and should be enabled:

 

[handiansudianto]

Hello,

So this setting is globally, i mean we can't configure for some vpn user?

[the_rock]

Not as far as I know.

[the_rock · Accepted solution]

I had client ask me that same question once and when we spoke with TAC, they were told it was not possible. Mind you, this was just over a year ago, maybe end of 2021, so its possible something may had changed since : - )

[the_rock]

To add to my last response, you are probably better to open an official TAC case and get answer in writitng. You know how the term goes, CYA, aka cover your a * * ; - )

[PhoneBoy]

You can configure it “Client Decide” so a user can choose to use Hub Mode.
However, you cannot force it for a specific user, it is either forced for everyone or forced for no one.

[the_rock]

Good point, though I had not see any customers choose option for client decide, but it is there if someone chooses to use it 🙂