OpenVPN Through Check Point Firewall

[Bernardes]

Hello Mates!

I'm in a client's scenario that uses an OpenVPN server. When this traffic passes outside the Check Point, the clients connect normally, but when we migrate the traffic to the Check Point, the clients can't authenticate.

There are already policies allowing this traffic and we can see the accepts.

Is there any recommendation to handle this OpenVPN traffic?

[Chris_Atkinson]

What does the rule look like that accepts the traffic?

Does your application control policy block "Critical Risk" & "Anonymizer" categories?

[the_rock]

I had this issue before with customer and I recall it had something to do with app being marked as critical 5 category. Can you please attach relevant screenshots of the rule (accept traffic)?

Please blur out any sensitive info.

Andy