Endpoint VPN and auto connect

[Johan_Rudberg]

Does the endpoint vpn have a function to auto connect to the gateway once the user brings their client computer home and connect it to the Internet?

[PhoneBoy]

You have to configure Location Awareness, I believe.

[Wolfgang · Accepted solution]

There is an option in the client configuration

[Yasser_Said]

Hello everyone,

Is there any automated way to disable auto connect in Endpoint VPN Version 81.10. I know this can be done manual, but I need to disable the auto connect in the MSI EPS.MSI. In the past with old version I used to use the adminmode then I can manipulate the MSI as I want. The autoconnect is causing users issues when they are connected to the network from the office. 

[Kathleen_Murphy]

I am having this issue as well.

[Marcos_Vieira]

There is an option called "Disconnect client when getting an IP from a VPN domain". See it in "https://community.checkpoint.com/t5/Remote-Access-VPN/Endpoint-VPN-and-auto-connect/td-p/47055". I think it will solve the problem when the users are inside the office.

[Johannes_Schoen]

Hi @Wolfgang :

do you know, where I can set this check box for all the clients?

We want it to be disabled, but setting it in trac.ttm endpoint_vpn_always_connected doesn't help - this parameter is not present in the local trac.config with E82.10

Best Regards
Johannes

[Chris_Atkinson]

Note the following "global property" also please have a look at the following SK to see if it meets your requirements.

sk108982: How to disable the default 'Always-Connect' on Endpoint Security / VPN Clients before depl...

[Dominik_E]

or you recreate the MSI and redeploy it to all clients. You can modify the client by the trac config file and there is an option for always connect. 

[Sanjay_S]

Hi Chris,

If i change the change the connect mode to Manual then how does it work? I went through the below link but did not get much clarification on this.

https://downloads.checkpoint.com/fileserver/SOURCE/direct/ID/8631/FILE/CP_NGX_R65.4_(HFA40)_Endpoint...

Manual

Always Connect

Configured on Endpoint

Need to get more clarification on these 3 options.

[PhoneBoy]

Manual means no auto-connection to VPN is possible.
Always Connect means the gateway forces the client to always be connected via VPN.
Configured on Client means the end user can (optionally) configure the option to be always connected via VPN.

[Sanjay_S]

Thats great then i can go with the Manual Option 🙂

Thanks PhoneBoy.