 Re: SNX issue
sorry for brief respons.....am in a hurry
Its vpn routing issue
1) If you are using securemote/secureclient make sure you have "route all traffic" enabled, because NO traffic thats not part of your vpn gateways encryption domain will be sent by secureclient to the gate.
2) Depending on version of checkpoint, you have also possibility to define different REMOTE ACCESS community besides the one defined by topology/interfaces. Check your gateway object.
3) Also check checkpoint pdf's for vpn_route.conf file for vpn routing accross gateways
Depends a bit on checkpoint versions etc.
edit: snx uses same encryption domain settings as securemote/client |