Checkpoint VPN Client can't not access to gateway with split-tunnel mode

[kaka]

Hi mates, 

I just noticed that when we configure RAVPN as split-tunnel mode, the VPN client can't access SG, both SSH and WebUI. 

The routing and specifying vpn domain should be okay because it's contained in the subnet. 

We don't see the mgmt/LAN IP of the gateway on the route table on the VPN client. 

Have any guys faced the same issue as me? 

Regard,

[PhoneBoy]

The gateway should be part of the encryption domain automatically.
Having said that, it can be removed from it either by .def file hacks or via SmartConsole from R81.20:

[kaka]

Hi @PhoneBoy 

We defined the encryption domain and included the gateway as well. 

[the_rock]

Make sure rule is there and also verify below is indeed right.

Andy

 

[kaka]

Hi @the_rock, 

It's still not working. even a re-initial VPN connection. 

[the_rock]

K, so we need more details. How did you configured what @PhoneBoy and I asked about? Can you send some screenshots? Just blur out any sensitive details.

Also, what does the rule look like for remote clients access?

Andy

[the_rock]

I uploaded a short video of what I was referring to.

Andy