Introduction

OK, here we go another chapter of VPN technology with more three-letter acronyms (TLAs). Some of the TLAs that we cover are MEP and SEP, but where does it end? We focus on the VPN functionality that Check Point has added to its FP3 product. We hope to show you how to utilize Check Point FireWall-1 NG to enable easy VPN deployment with high throughput while presenting solid return on investment.

From an encryption standpoint, we focus only on IPSec VPNs. The industry has come together around IPSec as a standard for layer 3 VPNs in the past five years. Check Point has been on the forefront of that standard, designing, implementing, and enhancing the roles that VPNs can provide for securing network communications. It is also clear that Check Point has one of the most flexible VPN platforms on the market today.

With FireWall-1 NG, Check Point has created some new VPN features, including the ability to modify specific configuration settings on a per VPN tunnel basis, the ability to route traffic within meshed VPNs, and enhanced client VPN/Firewall solutions. Check Point Multi Entry Point VPN (MEP) and Single Entry Point VPN (SEP) are deployment options that you need to be familiar with if you are going to design highly available Check Point VPN solutions.

What Are SEP and MEP?

Many companies have installed a single firewall to a single Internet connection and have been very satisfied with their configurations. As the company begins to use the Internet firewall...