https://community.checkpoint.com/t5/SASE-and-Remote-Access/Differences-between-Endpoint-Protection-Advanced-Remote-Access/m-p/282733#M14641 <DIV><P>The customer is currently using Endpoint Protection Advanced and, following headquarters' direction, plans to migrate to Microsoft Defender for Endpoint for endpoint protection.</P><P>The existing environment includes Check Point 9000 Series Security Gateway. As Microsoft Defender for Endpoint cannot coexist with the current endpoint protection solution on the same device, I am considering proposing the Mobile Access Blade license on the Security Gateway to replace the existing endpoint solution's remote access VPN (IPsec) functionality.</P><P>Based on the Check Point article (<A class="" href="https://support.checkpoint.com/results/sk/sk67820" target="_blank" rel="noopener noreferrer">Check Point SK67820</A>), it appears that Check Point Mobile for Windows IPsec VPN connectivity requires both the IPsec VPN and Mobile Access Software Blades to be enabled on the Security Gateway.</P><P>I would appreciate clarification on the following:</P><OL><LI>Is Check Point Mobile for Windows the same as Endpoint Security VPN?</LI><LI>Is a separate IPsec VPN license required for the Security Gateway, or is it included as part of the existing gateway licensing?</LI></OL></DIV> Thu, 24 Sep 2026 04:04:12 GMT xxxrcearx 2026-09-24T04:04:12Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/Differences-between-Endpoint-Protection-Advanced-Remote-Access/m-p/282733#M14641 <DIV><P>The customer is currently using Endpoint Protection Advanced and, following headquarters' direction, plans to migrate to Microsoft Defender for Endpoint for endpoint protection.</P><P>The existing environment includes Check Point 9000 Series Security Gateway. As Microsoft Defender for Endpoint cannot coexist with the current endpoint protection solution on the same device, I am considering proposing the Mobile Access Blade license on the Security Gateway to replace the existing endpoint solution's remote access VPN (IPsec) functionality.</P><P>Based on the Check Point article (<A class="" href="https://support.checkpoint.com/results/sk/sk67820" target="_blank" rel="noopener noreferrer">Check Point SK67820</A>), it appears that Check Point Mobile for Windows IPsec VPN connectivity requires both the IPsec VPN and Mobile Access Software Blades to be enabled on the Security Gateway.</P><P>I would appreciate clarification on the following:</P><OL><LI>Is Check Point Mobile for Windows the same as Endpoint Security VPN?</LI><LI>Is a separate IPsec VPN license required for the Security Gateway, or is it included as part of the existing gateway licensing?</LI></OL></DIV> Thu, 24 Sep 2026 04:04:12 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Differences-between-Endpoint-Protection-Advanced-Remote-Access/m-p/282733#M14641 xxxrcearx 2026-09-24T04:04:12Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/Differences-between-Endpoint-Protection-Advanced-Remote-Access/m-p/282751#M14644 <P>First - Licensing:</P><P>IPsec VPN is included in the FW license, so there is no additional license needed.&nbsp;<BR />For the remote access, you either need the Mobile Access (MOB) license on each gateway with a corresponding concurrent user amount. Or you order the Endpoint Access Control license (CPEP-ACCESS) for the amount of users independent of the number of gateways.</P><P>Second - Client:</P><P>To use just the Remote Access, there is the Enpoint Security VPN client, that can be installed in 3 ways:<BR />1. Endpoint Security VPN (correponds to the CPEP-ACCESS license)<BR />2. Check Point Mobile (corresponds to the Mobile Access license)<BR />3. SecuRemote (no license needed, but also no OfficeMode feature - so ignore this option)</P><P>&nbsp;</P> Thu, 24 Sep 2026 09:06:15 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Differences-between-Endpoint-Protection-Advanced-Remote-Access/m-p/282751#M14644 ThomasH 2026-09-24T09:06:15Z