Prevent route learning over VPN

[MarcuzShinz]

Dear Guy!

I am having a rather confusing issue that when the client connects to VPN remote access it automatically adds some routes, when I show route print via CMD on windows client.
How to turn off this automatic route learning?

[PhoneBoy · Accepted solution]

By design, all networks specified in the Remote Access encryption domain are sent to the client.
The only option is to remove such networks from the encryption domain.

[MarcuzShinz]

Do you mean the networks I use for Remote Access Communities?

[PhoneBoy]

Yes.

[the_rock]

Thats right, so as Phoneboy had said, its whats present in vpn domain specifically used for remote access ONLY. You can easily modify that via gateway (cluster) object in smart console, network management -> vpn domain, then edit it there, save, install policy, test. Just have clients disconnect/reconnect after policy is pushed.

Andy

[the_rock]

I am pretty positive what @PhoneBoy said has been the same way since the beginning of Check Point.

Andy