It is important to use a network that does not overlap a private network that exists behind the Checkpoint gateway.Ĭlick the Options link and define the following parameters.īefore users can authenticate, individual accounts must be created. NOTE : The IP Address and Subnet Mask defines the network that will be used to assign client virtual addresses. Then click the Edit link that corresponds to the Office Mode network. To configure these settings, navigate to the Network page and click the My Network tab. The Office Mode Network is the Checkpoint name for the remote access client network configuration. The default gateway is configured as 10.1.1.1 via the WAN interface. The internal interface has a static private IP address of 10.1.2.28 which faces the internal private network. The Internet Primary interface has a static public IP address of 10.1.1.28 which faces the internet. For more information, please consult your gateway product documentation.

This example assumes you have knowledge of the Checkpoint NGX gateway web configuration interface. The client uses the pull configuration method to acquire the following parameters automatically from the gateway. The configuration example described below will allow an IPsec VPN client to communicate with a single remote private network. NOTE: Checkpoint NGX is only supported by Shrew Soft Client version 2.1.5 RC2 or later. The configuration guild below shows examples from an Embedded NGX product. The Shrew Soft VPN Client has been tested with Checkpoint NGX products to ensure interoperability.

This guide provides information that can be used to configure a device running Checkpoint NGX version 8.0.33 or higher to support IPsec VPN client connectivity.

Check point capsule vpn setup