Remote Access Clients E75.20 Upgrading from SecureClient/SecuRemote NGX on NGX R65 SmartCenter Server

Remote Access Clients E75.20 Upgrading from SecureClient/SecuRemote NGX on NGX R65 SmartCenter Server 13 September 2011 © 2011 Check Point Software Technologies Ltd. All rights reserved. This product and related documentation are protected by copyright and distributed under licensing restricting their use, copying, distribution, and decompilation. No part of this product or related documentation may be reproduced in any form or by any means without prior written authorization of Check Point. While every precaution has been taken in the preparation of this book, Check Point assumes no responsibility for errors or omissions. This publication and features described herein are subject to change without notice. RESTRICTED RIGHTS LEGEND: Use, duplication, or disclosure by the government is subject to restrictions as set forth in subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013 and FAR 52.227-19. TRADEMARKS: Refer to the Copyright page (http://www.checkpoint.com/copyright.html) for a list of our trademarks. Refer to the Third Party copyright notices (http://www.checkpoint.com/3rd_party_copyright.html) for a list of relevant copyrights and third-party licenses. Important Information Latest Software We recommend that you install the most recent software release to stay up-to-date with the latest functional improvements, stability fixes, security enhancements and protection against new and evolving attacks. Latest Documentation The latest version of this document is at: http://supportcontent.checkpoint.com/documentation_download?ID=12325 For additional technical information, visit the Check Point Support Center (http://supportcenter.checkpoint.com). For more about this release, see the home page at the Check Point Support Center (http://supportcontent.checkpoint.com/solutions?id=sk65209). Revision History Date 13 September 2011 Description First release of this document Feedback Check Point is engaged in a continuous effort to improve its documentation. Please help us by sending your comments (mailto:cp_techpub_feedback@checkpoint.com?subject=Feedback on Remote Access Clients E75.20 Upgrading from SecureClient/SecuRemote NGX on NGX R65 SmartCenter Server ). Contents Important Information.............................................................................................3 Introduction to Remote Access Clients ................................................................5 Overview of Remote Access Clients.................................................................... 5 Endpoint Security VPN ................................................................................... 5 Check Point Mobile for Windows .................................................................... 5 SecuRemote client.......................................................................................... 6 Upgrading on Different Management Servers...................................................... 6 Why You Should Upgrade to Remote Access Clients.......................................... 6 Before Upgrading to Remote Access Clients....................................................... 7 Supported Gateways and Servers .................................................................. 7 New Remote Access Clients Features............................................................ 7 SecureClient Features Supported in Remote Access Clients.......................... 8 SecureClient Features Not Yet Supported.....................................................10 Configuring Gateways to Support Remote Access Clients...............................11 Installing the Remote Access Clients Hotfix........................................................11 Configuring for Endpoint Security VPN and Check Point Mobile for Windows ....11 Configuring SmartDashboard for SecuRemote client..........................................15 Supporting Endpoint Security VPN and SecureClient Simultaneously................17 Troubleshooting Dual Support............................................................................19 The Configuration File..........................................................................................20 Editing the TTM File ...........................................................................................20 Customized Settings...........................................................................................20 Centrally Managing the Configuration File..........................................................21 Understanding the Configuration File .................................................................21 Configuration File Parameters .......................................................................22 Migrating Secure Configuration Verification........................................................24 Differences between SecureClient and Endpoint Security VPN CLI.................25 Chapter 1 Introduction to Remote Access Clients In This Chapter Overview of Remote Access Clients 5 Upgrading on Different Management Servers 6 Why You Should Upgrade to Remote Access Clients 6 Before Upgrading to Remote Access Clients 7 Overview of Remote Access Clients Remote Access Clients provide a simple and secure way for endpoints to connect remotely to corporate resources over the Internet, through a VPN tunnel. Check Point offers 3 enterprise-grade flavors of Remote Access to fit a wide variety of organizational needs. The clients offered in this release are:  Endpoint Security VPN - Incorporates Remote Access VPN with Desktop Security in a single client. It is recommended for managed endpoints that require a simple and transparent remote access experience together with desktop firewall rules.  Check Point Mobile for Windows - An easy to use IPsec VPN client to connect securely to corporate resources. Together with the Check Point Mobile clients for iPhone and Android, and the Check Point SSL VPN portal, this client offers a simple experience that is primarily targeted for non-managed machines.  SecuRemote client - A secure, yet limited-function IPsec VPN client, primarily targeted for small organizations that require very few remote access clients. For complete information about deploying and using Remote Access Clients, see the Remote Access Clients E75.20 Administration Guide (http://supportcontent.checkpoint.com/solutions?id=sk65209). Endpoint Security VPN  Replaces SecureClient and Endpoint Connect.  Enterprise Grade Remote Access Client with Desktop firewall and compliance checks.  Secure Configuration Verification (SCV) is integrated with Windows Security Center to query the status of Anti-virus, Windows updates, and other system components.  Integrated desktop firewall, centrally managed from SmartCenter server.  In-place upgrade from Endpoint Security VPN R75.  In-place upgrade from Endpoint Connect R73.  Requires the IPSec VPN Software Blade on the gateway, and an Endpoint Container license and Endpoint VPN Software Blade on the SmartCenter server. Check Point Mobile for Windows  New Enterprise Grade Remote Access Client. Page 5 ... - tailieumienphi.vn