The reason we have the accept at the bottom is to ensure that if you are not connected to the VPN the policy will still allow traffic out to the internet.Ĥ. Configure your Desktop Policy to encrypt all traffic and one below to accept all traffic. Then add a manual NAT after this to NAT the remote users source address to you’re your gateways external IP address if destined for the internet.ģ.First of all configure a manual NAT rule to keep the original source address of your Remote access user if going to an internal address.

You will need to configure the traffic destined for the internet is NAT`s behind a public IP. Goto the Check Point objects and Enable “Allow Secure Client to route traffic through the gateway”Ģ. Below are the steps involved in disabling Split Tunneling,ġ. In order to disable this you must first of all make sure your using Office mode. Split tunneling is a term given to which a remote access VPN user can access the Internet directly, rather then traffic destined for the internet being sent down the VPN tunnel.Ĭheck Point enables split tunneling by default. This desktop policy would allow inbound unencrypted RDP traffic.

Encrypt – Allows only this traffic through encrypted.īelow shows an example of a desktop policy.

This means that any traffic within the encryption domain will be encrypted.

Accept – This allows traffic out unencrypted.

In these sections you have various actions. Within the Desktop Policy Tab of your Check Point Policy (via Smart Dashboard) you have 2 sections inbound and outbound. Secure Client – Non-free licensed client allowing the enforcement of desktop policies.In the world of Check Point remote access there are 2 types of clients that are used for remote VPN access.

Checkpoint vpn client