Connected to SNX, but cannot reach internal network (server)

[CEEJAY]

Hello, I am encountering an issue regarding Check Point SNX (Network Mode). I can successfully connect to SNX and get an Office Mode IP, but when I tried to ping the server and access web app in my internal network, it does not work. Does VPN Domain has something to do with this? The only policy I created is in the Mobile Access Policy by creating a Native Application and editing the targeted server. 

[emmap]

What do you see in the traffic logs?

[CEEJAY]

From the logs, I think it was being dropped by the clean up rule, but I tried to add a rule src:office mode ip | dst: the server and lan | services: any | action: accept but still cannot reach the server or other resources in the lan.

[emmap]

Under Mobile Access in your gateway, is it configured to use Legacy policy or Unified policy? And where did you set up the access? 

[CEEJAY]

It is configured to use legacy policy. What do you mean where did i set up the access? 

[emmap]

Where did you add the access configuration? If your gateway is set to legacy policy then you'll need to add the access configuration in the old Mobile Access policy to allow SNX to connect into network resources.

[CEEJAY]

the clusterXL is running with R82 version, the rule base for mobile access is now accessible thru smart console, that is where I confgured the access rule.

[emmap]

Yes but when the gateway is configured to use the Legacy policy, you have to configure the access through the old Mobile Access GUI in the Shared Policy section. If you want it integrated into the main access policy you have to change the gateway to use Unified policy.