topic Re: VPN check/compliance in SASE and Remote Access

VPN check/compliance

LucianoJesus — Tue, 06 Sep 2022 13:41:28 GMT

I thing that VPN check/compliance is very nebulous.

Considering that I have blades Mobile Access and IPSec VPN licensed and enabled on R80.30, could someone validate if I understood correctly?

1. I can do VPN Mobile compliance, including using the GUI for configuration, without the need for additional licensing.

2. I can do VPN Client compliance, using very hard SCV file configuration, without the need for additional licensing.

3. I can't use Endpoint Security Compliance because it depends on a blade license that I haven't.

4. In the image above, in order to enable the "Compliance" feature, would I need to have Endpoint Security Compliance licensed?

Thanks!!!

Re: VPN check/compliance

PhoneBoy — Tue, 06 Sep 2022 14:21:48 GMT

Compliance in this case refers to the Endpoint Compliance feature, which requires using Endpoint licensing and management (with relevant licenses).
SCV can be done without additional licensing and does not use this feature.

Re: VPN check/compliance

Chris_Atkinson — Tue, 06 Sep 2022 14:22:43 GMT

Seat based licenses like the following examples are the entry point into the fully featured client.

CPEP-ACCESS-1Y -or-

CP-HAR-EP-BASIC-1Y

Re: VPN check/compliance

Ruan_Kotze — Tue, 06 Sep 2022 17:59:14 GMT

Your understanding is correct on points 2,3 and 4. Not quite sure what is meant with 1.

FWIW - Here's a write up I did on how to achieve point 2.

Re: VPN check/compliance

the_rock — Tue, 06 Sep 2022 19:58:52 GMT

Guys gave you all good responses. Btw, Im not sure either when you mean by point 1, unless its SCV check.