Mobile Access Blade greyed out on Centrally Managed SMB 1600

[jyrbn]

Hi, 

We are trying to configure remote access VPN on our centrally managed SMB 1600 and are encountering an issue where the option to route all traffic to the Gateway on the Endpoint client is greyed out. 

I've found an SK (sk101239) regarding this and found that there is a setting in Global Properties that needs to be configured to route all traffic from remote clients through the gateway. 

Our issue is that this setting is not available to us when opening Global Properties. Check box to enable Mobile Access is also greyed out. (Image for reference)

We need to route the traffic of the remote clients through the gateway because they can only access some of our Cloud resources using the Public IP of our gateway. 

Any ideas?

[PhoneBoy]

IPsec VPN OR Mobile Access Blade supports Remote Access clients.
Mobile Access Blade is only required for the web portal, which is not supported on SMB appliances.

I just posted screenshot of the necessary settings to force Hub Mode here: https://community.checkpoint.com/t5/Remote-Access-VPN/Split-Tunnel-Domain-group/m-p/246548/highlight...
These were taken in R81.20 Management.
Are you saying these same settings don’t exist in your management in the same place?

[jyrbn]

The setting on the screenshot you sent is already enabled but we still can't modify VPN tunneling on the Mobile Client. 

The setting that I was looking for or referring to was the one mentioned in sk101239.

In the Basic Configuration part, step 1.D.

[Wolfgang · Accepted solution]

@jyrbn what you need is called hub mode. Please follow sk101239 - Route all traffic from Remote Access clients, including internet traffic, through Securit... You have to enable this setting under the client section you are using

[jyrbn]

Thanks!

I was looking at the gateway object properties my mistake. 

[the_rock]

Check out below link, it would appear its not supported for MAB. I know its for 1490, but same is valid for 1600 and 1800.

Andy

https://community.checkpoint.com/t5/SMB-Gateways-Spark/Mobile-Access-Blade-on-a-Centrally-managed-SM...