topic Re: Connect full featured Endpoint VPN client to a Secure-Remote-only-site which NOT allows Office M in SASE and Remote Access

Connect full featured Endpoint VPN client to a Secure-Remote-only-site which NOT allows Office Mode

Tobias_Moritz — Mon, 07 Oct 2019 09:15:16 GMT

Hello community,

we have a customer who runs two RAS plattforms based on Check Point.

One plattform has RAS client licences and one has not.

The first ones offers (and needs) Office Mode.

The second one does not offer office mode and does not need it.

We have the approval from the customer to connect to both VPNs from the same virtual machine (Win64). Of course only one at a time. But when we install the Endpoint Security VPN client flavor, we can only connect to plattform one, because the second one does not offer Office Mode and has no licence for this. When we install Secure Remote, we can only connect to plattform two, because this client can not use office mode.

Is there any way so solve this problem without using two different virtual machines?

Is it maybe possible to install both flavors in parallel?

Thank you for any ideas.

Re: Connect full featured Endpoint VPN client to a Secure-Remote-only-site which NOT allows Office M

G_W_Albrecht — Mon, 07 Oct 2019 11:25:51 GMT

The problem here is: Secure Client (= standalone RA Enterprise VPN client) is the same SW as SecuRemote client or Mobile RA VPN client - only difference is one MS Registry parameter...

So there are three possibilities to cope with that issue:

- set the registry key before access as needed (see Changing the Standalone Remote Access Client flavor)

- use SSL VPN / MAB for OfficeMode and SecuRemote for the non-OfficeMode GW

- use 2 VMs

Re: Connect full featured Endpoint VPN client to a Secure-Remote-only-site which NOT allows Office M

Tobias_Moritz — Mon, 07 Oct 2019 12:03:41 GMT

Thank you very much!