how to have split tunnel RAS on an 1800 with one URL accessed via the firewall

[LazarusG]

The requirement is;

1) home users break out locally for internet

2) they access LAN resources using office mode RAS

3) one URL needs to be access from the public ip of the firewall.

4) it an 1800SMB

I assumed that if we could add a host entry to the endpoint we could make it resolve to an IP in our encdom then potentially use a nat rule with an fqdn in the destination (sk167194) to forward it on.

I wondered also about using a Secureremote DNS object, but dont think the 1800 likes that.

I wonder if I'm over thinking or just missing a better way of doing this (if its possible at all).

Thanks.

#edit#

i forgot to say its centrally managed via smart-1 cloud

[the_rock]

Not sure if what I posted below would be relevant here...

Andy

https://community.checkpoint.com/t5/Remote-Access-VPN/Domain-objects-in-remote-access-vpn-domain/m-p...

[LazarusG]

that looks interesting - thank you.

[the_rock]

No worries. I know wording is little convoluted, since it HAS TO start with exclusions_ and then you can add whatever else to it, but it does work.

Keep in mind, it ONLY applies on split tunnel, not full.

Andy

[LazarusG]

Ah thanks - looks like its also in sk167000?

I think this is the opposite of what I am trying to do - this seems to allow the client to break out locally for defined services.

What I need is for one URL to go up the tunnel so its accessed from the gateway.

Appreciate the response though: thanks.

[the_rock]

Ah, kk...Isee. In that case it might not be supported, sorry.

Andy