Remote access to same network via 2 gateways

[Mark_Edwards]

Hi all,

client has a 10.200.11.0/24 network behind a Check Point in Azure.

They have a on-premise cluster where they can access the same Azure network from the office LAN via a S2S VPN between the on-premise and Azure Check Points (R81.20).

Both the cluster and Azure Check Points are managed by the same on-premise manager.

They can also remote access to the Azure network via the on-premise cluster/S2S VPN  as the on-premise RAS encryption domain includes the office and DR networks. 

What they can't do is remote access to the Azure Check Point directly and connect to the 10.200.11.0/24 Azure network.

They can only connect if I remove the Azure network from the on-premise RAS encryption domain.

Is there a way to be able to remote access to both gateways and have access?

I thought it might be a MEP related issue?

on-premise RAS encryption domain:

172.16.x (office)

10.200.11.0/24 (Azure)

Azure Check Point RAS encryption domain:

10.200.11.0/24

[Gojira]

Check "secondary connect" feature:

https://downloads.checkpoint.com/fileserver/SOURCE/direct/ID/115921/FILE/CP_R81.10_RemoteAccessVPN_A...