This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
ABOUT CHECKMATES & FAQ
Create a Post
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Help

Are you a member of CheckMates?

×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
Max_Mog
Explorer
‎2022-04-26 07:36 AM

Syntax of vpn exclusion in crypt.def

Hello Community,

Have questions regarding the syntax of the vpn exclusion in crypt.def.

1) Is it possible to configure several dynamic groups for a gateway? For example:
all@gw1 vpn_exclude_1={192.168.2.1,192.168.2.255};
all@gw1 vpn_exclude_2={192.168.3.1,192.168.3.255};
all@gw1 vpn_exclude_3={192.168.4.1,192.168.4.255};
... and then use a RULE:
(dst in vpn_exclude_1) or (dst in vpn_exclude_2) or (dst in vpn_exclude_3)

2) What is the syntax to define several hosts or ranges in one exclusion group "vpn_exclude"?

Thank you.

0 Kudos
0 Replies