- Products
- Learn
- Local User Groups
- Partners
- More
Check Point Jump-Start Online Training
Now Available on CheckMates for Beginners!
Why do Hackers Love IoT Devices so Much?
Join our TechTalk on Aug 17, at 5PM CET | 11AM EST
Welcome to Maestro Masters!
Talk to Masters, Engage with Masters, Be a Maestro Master!
ZTNA Buyer’s Guide
Zero Trust essentials for your most valuable assets
The SMB Cyber Master
Boost your knowledge on Quantum Spark SMB gateways!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
CheckFlix!
All Videos In One Space
We have a split tunnel set for our VPN Remote Access users that excludes Microsoft traffic using an exclusion group and an update script to dynamically update Microsoft IP ranges.
We would like to add another non-Microsoft service to the split tunnel exclusion, but we can't manually add the IP's in to the current exclusion group as it will break it.
Does Check Point support nesting groups?
We are thinking of creating another exclusion group and then nest both groups into a "master" split tunnel group for example:
Current config
Remote Access Community > VPN Exclusion group > Group of MS IP list
New config
Remote Access Community > Split-Tunnel standard group > VPN Exclusion group > Group of MS IP list
> Other exclusion group > Group of Other Service IP list
Generally, nested groups are supported.
Not sure in this context.
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY