CheckPoint and Tunnel Splitting

Posted on 2006-04-24
Medium Priority
Last Modified: 2012-08-13
I have a Safe@Office 425W (firmware ver. 5.0.82x and hardware version 1.1).  My "road warriors" are running CheckPoint VPN-1 SecureClient NGX R60 (Build 191).
The issue i'm having is, when they connect to our network (connection is fine); they lose their local internet access.  This means that if they are at a client, at home or where ever, and connect to our network, they drop their ability to surf the web.  I've been reading something about policy settings but have yet to find any way to set them.  It was easy in a PIX router (Cisco) but this device has no tunnel splitting option - just a User.C file found in the Check Point folder of each user.
I believe I could use Secure Remote but would rather use the Secure Client instead.
I must be over-looking something.
Any ideas?

Thank You

Question by:jpoole_007

Author Comment

ID: 16540484
Sorry everyone,   I figured it out.

The Answer is:  I had to setup SecureClient in Extended View.  Once done and the software stops and starts itself, I had to delete my profile/site and recreate it again.  Then, in the properties of the profile in the Advance tab, I had to turn off HUB mode.  This would then allow me to surf the web via my local connection as well as access my server via VPN.

Just a note - after doing the above - I still had an issue accessing drives on my server.  I found that my PC-Cillon (Trend Micro) 2006 personal firewall was blocking the ports needed by Check Point.  After opening up those ports in Trend Micro, everything worked fine.  Those ports are as follows:

...The filtering device has the following ports blocked: -TCP Port 264 -TCP Port 256 -UDP Port 259 -UDP Port 500 -Protocol 94, 50 and 51...

which can be found here at Experts-Exchange using this link:


Accepted Solution

GranMod earned 0 total points
ID: 16754295
PAQed with points refunded (125)

Community Support Moderator

Featured Post

[Video] Oticon Case Study

Open office environments can create the dynamics for innovation, but they also bring some challenges. With over 1,000 employees in an open office, Oticon needed a solution that would preserve the environment while mitigating disruptive background noises.

Watch how they did it.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Moving your enterprise fax infrastructure from in-house fax machines and servers to the cloud makes sense — from both an efficiency and productivity standpoint. But does migrating to a cloud fax solution mean you will no longer be able to send or re…
This article shows how to use a free utility called 'Parkdale' to easily test the performance and benchmark any Hard Drive(s) installed in your computer. We also look at RAM Disks and their speed comparisons.
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an anti-spam), the admin…
Please read the paragraph below before following the instructions in the video — there are important caveats in the paragraph that I did not mention in the video. If your PaperPort 12 or PaperPort 14 is failing to start, or crashing, or hanging, …
Suggested Courses
Course of the Month14 days, 14 hours left to enroll

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question