topic Checkpoint SecuRemote vs. Capsule IP space in SASE and Remote Access

Checkpoint SecuRemote vs. Capsule IP space

Bill_Ng — Wed, 15 Aug 2018 16:28:27 GMT

Can someone explain to me why I am not getting the same client remote access IP address space when I use Checkpoint SecuRemote as compared to Checkpoint Capsule?

When I connect to the same 1100 gateway using my phone with Checkpoint Capsule I get the ip of 172.16.x.x as configured on the gateway. When I connect to the same 1100 gateway using my Windows 10 machine with SecuRemote the virtual interface/Office mode IP gets an ip of 192.168.0.2. When I watch the packets on the gateway from the Windows 10 machine I see that the source IP as the ip address of the network (10.10.x.x) I am connected to while initiating the VPN. (hope that makes sense). I would expect a 172.16.x.x assigned when I use Checkpoint SecuRemote. Am I missing something in the configuration of the client or the gateway?

Thanks,

Bill

Re: Checkpoint SecuRemote vs. Capsule IP space

PhoneBoy — Thu, 16 Aug 2018 03:54:52 GMT

SecuRemote does not support Office Mode, which is required to be assigned the 172.16.x.x address as you've configured.

You need to install the VPN client as Check Point Mobile to leverage Office Mode (and have appropriate license to use it).

Re: Checkpoint SecuRemote vs. Capsule IP space

G_W_Albrecht — Thu, 16 Aug 2018 14:25:37 GMT

Most easy way to get to mobile is found here: Changing the Standalone Remote Access Client flavor

Re: Checkpoint SecuRemote vs. Capsule IP space

G_W_Albrecht — Tue, 21 Aug 2018 10:06:06 GMT

Does it work now as expected ?

Re: Checkpoint SecuRemote vs. Capsule IP space

Robin_H — Wed, 04 Mar 2020 17:49:28 GMT

Using cpview on R80.20, I can see a number of "Office Mode assigned IPs". Is this the number I need to count against my licensed SSL/MOB user blade?

Re: Checkpoint SecuRemote vs. Capsule IP space

PhoneBoy — Sat, 07 Mar 2020 07:41:04 GMT

Believe so, yes.

Re: Checkpoint SecuRemote vs. Capsule IP space

Robin_H — Mon, 20 Apr 2020 14:58:39 GMT

My question "number of Office Mode assigned IPs to count against licensed SSL/MOB user blade" was a bit off-topic.
From personal experience I can now confirm that this applies and it´s a hard limit.