Harmony SASE - Interbranch Communication

[raveen]

Hi Guys,

two

I need to establish interbranch connectivity in a Harmony SASE environment. I have mentioned my specific use case below.

• The customer is using the printers in the branch and these printers are plugged into the PCs via USB and share within the network using the Static IP of the PC.

Currently we are deploying Harmony SASE in the branch and having some problems establishing the connectivity between the Branch PCs to Printer PCs. I have attached the challenges we have below

• The customer want to use the Disable Sign-out and Uninstall option.
• Customer wanted to use Static IP for the Printer PCs and Harmony SASE does not support allocating Static SASE Network IPs to the endpoints.

Is there anyway to fulfill the requirement. I really appreciate any help you can provide.

Raveen.

[Chris_Atkinson]

Does the branch hardware consist of a device that supports terminating an IPSec VPN tunnel or are you trying to use a different connector?

This might be an alternate strategy to those use cases not supported by the agent as would expose the clients native IP.

[raveen]

I'm using SASE agents in the branch endpoints

[Tomerda · Accepted solution]

Hey Raveen,

Disable sign out is configured via the user profile but it is available in certain plans.

We indeed don't have static virtual IP but printers PC but 

1. If you don't install agent on this PC, we use the allocated IP by the admin

2. When working with agent at the office, we will use the real IP allocated by the admin. ETA: end of Q2/early Q3)

Please contact me at tomerd@checkpoint.com to discuss it in detail. 

Tomer

[_Val_]

Thanks @Tomerda