Disable VPN for clients from inside network to the firewall

[Adnan_Pajalic]

Hello,

need help about how to disable VPN for clients connecting from inside network. Customer has identified that many of his users are connecting by VPN to the company altough they are in inside network 🙂 Is there any option that can be configured for firewall not to accept connections from inside , but only from outside networks ? or do i need to limit it by adding access rules.

Thanks in advance.

[PhoneBoy]

There's an option called Location Awareness designed to solve this exact issue.
You can start here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[Adnan_Pajalic]

Thanks for pointing out.

For others to know its located under global properties in smart console under Remote Access > Endpoint Connect  > Network location awareness.

But it didnt't work as expected until i changed for firewall options under IPSec VPN  > Link Selection and selected Calculate IP based on network topology.

[lrossi89]

Hi,

any news about it? Has anyone found a solution?

[PhoneBoy]

Location Awareness is the canonical way to solve this problem.
Did you apply what was suggested by @Adnan_Pajalic?
If it's not working as expected, please engage with the TAC: https://help.checkpoint.com