Backup over vpn

[ibrown]

Hello Everyone,

odd question this, but I've not found a solution as yet.  I have several Quantum spark appliances around the world in branch offices, connected to the main office via vpn.

I schedule periodic backups but these come out via the external (ie primary) interface address and don't decrypt and route correctly at the main office end. Is there a way to force an interface for the ftp traffic ?

Currently I send to an externally facing SFTP server, but ideally I'd come via the vpn.

Any thoughts ?

Thanks

Ian

[Chris_Atkinson · Accepted solution]

Locally or centrally managed?

In advanced settings there is an option to source locally generated traffic from the internal address as an option.

"Use Internal IP address for encrypted communications from the local gateway"

Other options exist but may add unnecessary complexity in configuration 

[ibrown]

Hi Chris, this is a spark 1570 R81.10.08, and centrally managed. However the only option in advanced I can see is '
DHCP relay - Use internal IP addresses as source'

[PhoneBoy · Accepted solution]

The procedure is different for centrally managed SMB appliances: https://support.checkpoint.com/results/sk/sk119415