VPN Client to Client Connections without hub mode

[Reyman2021]

Is there a way we can achieve remote access vpn client to client connection without using hub mode? We still want to use the default configuration which is split tunneling as the hub mode consumed the head office bandwidth.

[PhoneBoy]

See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[Reyman2021]

Hi, This is a hub mode setup. Is it possible without enabling the hub mode?

[PhoneBoy]

The setting in that SK is to allow it when required, not force it.
The "force" setting is in Global Properties and it should not be required in this case:

[Reyman2021]

Hi,

I think this is the same in per gateway object. The only difference is in global properties, it is enabled to all gateways managed by the management server? Am I correct?

[PhoneBoy]

The global properties setting can require clients to use hub mode, the gateway setting merely allows such routing to occur when necessary (e.g. when RA clients need to talk to each other).

[Reyman2021]

Based on sk101239, it looks the same. Do you mean it will now consumed bandwidth and throughput from the gateway if we only enabled it per gateway and not in the global properties?

[Reyman2021]

Sorry let me rephrase it.

Based on sk101239, it looks the same. Do you mean it will not consumed bandwidth and throughput from the gateway if we only enabled it per gateway and not in the global properties?