Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a simple question for my checkpoint infrastructure.

Do i have to route a net which i wanna access over a configured firewall VPN Tunnel.


I have two firewalls connected over a VPN which have several nets behind them. I need to access a new net at the other firewall and put them in their encryption Domain. Now here is the question: Do i have to route it in the operating system (SecurePlat)?


share|improve this question
up vote 2 down vote accepted

The only reason you would need to add a route is if the network on the remote end was not directly connected to the VPN termination on the other end. Otherwise, adding it to the encryption domain on both sides is the only thing you need to do.

In the event that you needed to put a route in, it WOULD have to be entered in on SPLAT. It's fairly easy to do via the webgui, but you can also do it via sysconfig if you ssh into the Checkpoint.

share|improve this answer

Adding to JakeRobinson's good answer: If you end up doing it via the SPLAT CLI, remember to

route --save

(Ask me how I know) There's a nice discussion of manual route management in this CPUG thread.

share|improve this answer
Yah, if you add the routes manually don't forget to save. The "sysconfig" tool saves it automatically though. Here are the instructions:… – JakeRobinson Jul 23 '10 at 17:39

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.