Introduction

Virtual private networks (VPNs) have been around for a long time, and with time, they have increased in popularity. If you haven t configured remote VPN access on your Check Point NGX R65 FireWall-1/VPN-1 yet, this chapter will take you through the different methods and configuration options. Several different methods currently exist; however, SecuRemote, SecureClient, and SSL Network Extender (SNX) are the most popular.

SecuRemote is a client-side application that allows authenticated users to enter the network to work as though they were directly connected at the office. SecuRemote offers split tunneling by default, so when a user is connected to the LAN, he can also connect to the Internet through his Internet service provider (ISP). SecuRemote comes free of charge with the purchase of a FireWall-1/VPN-1 license.

SecureClient offers the same functions as SecuRemote, but adds more flexibility and configuration options. With SecureClient, you can install a client-side desktop security policy that will protect the remote client while connected on the VPN. This desktop security policy will ensure that when a user is connected to the NGX R65 FireWall-1, the client will be protected from any possible hackers on the Internet. SecureClient can also prohibit Internet access from users ISPs and have them route all traffic through the corporate firewall according to customizable desktop security rules. When the client disconnects from the VPN, Internet activity is returned to normal and the user can route traffic through his ISP.

SNX allows remote VPN users to connect without a client installed...