topic Is client ipsec possible with visitor mode disabled? in General Topics

Is client ipsec possible with visitor mode disabled?

mukai — Tue, 30 Jun 2020 15:42:16 GMT

Remote access without visitor mode enabled?

I saw this,but Result unknown

The environment of client ipsec is R80.30 gateway+E82.40 Remote Access Clients for Windows(E82.40_CheckPointVPN.msi)

I also tested the client with the simplest securemote, but if visitor mode was not turned on, ipsec(NAT TRAVERS Al) could not connect.

After all, in the latest environment R80, can client ipsec be done with visitor mode off?

I want to connect client ipsec without opening port 443

Re: Is client ipsec possible with visitor mode disabled?

PhoneBoy — Sat, 04 Jul 2020 20:39:53 GMT

I know Visitor Mode is required to do the initial VPN configuration on the client.
I don't believe it's strictly required outside of that.

Re: Is client ipsec possible with visitor mode disabled?

mukai — Sun, 05 Jul 2020 08:31:26 GMT

agree

Confirm the server certificate by https communication at the first startup, but after that there is no https communication

I want to publish only the ipsec(NAT traversal) port, but it is not possible because it is a client VPN software specification.