Remote access user not able to access Branch office(s) network

[Thabo]

Good Day

I have a setup where my mobile access users through secure remote are not able to access other subnets/branches.

My setup is Remote Access VPN User >Firewall>Internal Network >Branch Offices

The remote access VPN users are not able to access subnets at Branch office which connect to the head office through MPLS there are not firewalls at the branch offices and they breakout through the HQ/HO where the vpn firewall is for internet access. 

Regards

[Alex- · Accepted solution]

You need to make sure the remote offices are included in your Remote Access encryption domain and your Office Mode or any relevant NAT you would use is routed back in your MPLS and  LAN to the firewall.

[PhoneBoy]

Are the Branch Offices available over a Site-to-Site VPN?
Those networks needs to be included in the Encryption Domain.
If you're actually using SecuRemote (instead of Check Point Mobile or Endpoint Security VPN), you will also need to configure IP Pool NAT.