I would like disable split tunneling for vpn

[Yohan_Vaisseau]

I installed the client vpn check point mobile and I wish that the internet flows through the vpn

[G_W_Albrecht · Accepted solution]

See sk111995: You have to set Hub Mode / Route all traffic to gateway in Global Properties -> Remote Access -> Endpoint Connect -> Route all traffic to gateway -> set to "Yes" 

[Ilovecheckpoint]

Hello,

Hello,

once "Route all traffic to gateway" is set to YES, is the VPN domain configured in the remote access community checked, or is it treated as if the VPN domain is set to "All Internet"? In other words, if I select this option to YES and the VPN domain for remote access is set to only internal IP addresses, is all traffic still forced through the gateway, without considering the VPN domain setting?

[PhoneBoy]

Assuming you don't leave this as a "client decide" option to configure, you are correct.

[Gaurav_Pandya]

Yeah. That is correct what Gunther has suggested. It is best way.

Also you can try with enabling option "VPN Tunneling" on Endpoint client agent itself. but it is manual task.

If you are using SSL VPN with Mobile access blade then follow below procedure to route all traffic to gateway.

https://community.checkpoint.com/message/12386-mobile-access-default-route

[Omar_Khalif]

Hi,

checkpoint vpn tunneling greyed out ?  How do I get this ungreyed out ?

[Maarten_Sjouw]

It is grayed out when it is controlled by the gateway.

[Basilio_Alcant1]

Hi Guys,

can somebody tell me how to change this on the endpoint? we would like to turn on split tunneling only for one endpoint for testing purposes without changing this for everybody via Global Properties.

Thank You,

Basilio Alcantara

[marimcuri]

Hi Omar,

Did you get any solution? I'm facing same issue in MacOS. For Windows I already saw some workarounds however not applicable for Mac.

[Yatiraj_Panchal]

Hi,

Yes, you can this. Follow the below step:

Global Properties --> Remote Access --> Endpoint Connect --> Route all traffic to gateway --> set to "Yes" 

[Basilio_Alcant1]

I would like to modify it on the endpoint client for a machine manually , not on global properties since that will be a global change that affects all firewalls hosting remote acccess.

[Lari_Luoma]

Global Properties - Remote Access End Pont Connect select the following option.

Route All Traffic to GW: Configured on endpoint client

[Alex_Alborzfard]

After enabling this, can't access anything outside, only internal. Do we need to enable NAT for the Office Mode subnet, in order to be able access outside?