RADIUS Authentication over Site-to-Site VPN 1450 self managed

[Leonid_German]

I have 1450 self-managed device.
I have set up a Radius Server to authenticate remote-access VPN clients. The Radius server is located at a remote site connected via Site-to-Site VPN on the same gateway the clients connect to.

Authentication fails because the request to the Radius server does not go through the VPN tunnel. Logs show traffic is accepted by an implied rule and consequently not encrypted.

[G_W_Albrecht]

Is the RADIUS IP included in VPN encryption domain ?

[Leonid_German]

Yes , it is.
Ping from the internal interface is working  (ping -I).

[tomando11]

I've just gone through the same thing and managed to resolve it.
Device>Advanced Settings

Tick the box in the image for 'Use internal IP address for encrypted connections from local gateway'.

[G_W_Albrecht]

Just for reference: https://support.checkpoint.com/results/sk/sk119415 contains this solution and the one for Centrally Managed SMBs !