disable vpn client from updating the site ip address

[Dor_Marcovitch]

hey,

how can i disable the client from updating the gateway ip on the vpn site once it connects to the gateway ? 

[G_W_Albrecht]

Why would you have to do this ? Is the client unwilling to work over RA VPN and boycotts it by changing the site IP ? I would just sack em...

[Dor_Marcovitch]

we have multiple APNs configured as External Interface, and event one with VIP on different subnet, what happens is that the client update the GW IP to one of the APN that the SIM of the client does not belongs to.

one time i even got the "private ip" of the interface with the VIP on different subnet.

VPN Clients comes only from one APN to one VIP of the FW so i want to harden this configuration.

[RS_Daniel · Accepted solution]

Hello,

Try using that APN VIP on remote access link selection config:

Configuring VPN Link Selection for Remote Access client (checkpoint.com)

Regards

[Dor_Marcovitch]

thanks, this is what i was looking for, i will try this configuration