split tunneling checkpoint vpn client

[Alejogoci]

best regards
I want to know if I can force users who connect via vpn they can only browse the internet if they are connected to the vpn and if they are not connected they cannot browse

[PhoneBoy]

It can be done with the full Endpoint client, yes.
See: https://sc1.checkpoint.com/documents/R81.10/SmartEndpoint_OLH/EN/Topics-EPSG/FirewallSource.html?toc... 

[Alejogoci]

Thank you very much for the answer, the client does not have an Endpoint. you can in another way

[PhoneBoy · Accepted solution]

If you're not using the full Endpoint suite, you can create a Desktop Policy in SmartConsole.
The Desktop Firewall feature needed to support this requirement requires one of the following licenses:

• Harmony Endpoint (any of the current packages should work)
• ACCESS licenses (CPEP-ACCESS SKUs)
• Legacy SecureClient licenses

The instructions can be found in the Managing Desktop Firewalls section of the Remote Access Clients doc: http://downloads.checkpoint.com/dc/download.htm?ID=60345 

[Alejogoci]

best regards
Thanks for your help, the information is very useful.