topic Re: Smart-1 Cloud with 1530 Appliance and Remote Access VPN in SASE and Remote Access

Smart-1 Cloud with 1530 Appliance and Remote Access VPN

dtrx — Mon, 29 Nov 2021 06:48:23 GMT

Hi There

Has anyone experience with Smart-1 Cloud and 1530 Appliance using Remote Access VPN?

I can manage the box, I can download policies, I can create VPN and all, but there is NO WAY I can connect with Capsual to the box?

I am not sure is it is a license problem, if I NEED mobile access license for it or VPN is enought? I get the message of the certificate when I connect, than END of the story.

Also all the IPs are a bit confusing

The gateway has the IP of 100.100.6.13x (in Smart-1 cloud)
The management has the IP 100.64.0.5x
The real official gateway IP 92.107.40.xxx (ISP Provider)
The real inofficial IP (NAT 1:1) is 192.168.1.128

I do not know if I have to add in the gateway properties IPsec VPN Statically NATed IP which IP? and what is my access point to connect with the Capsual client. All very new, all a bit confusing.

Thanks Oliver

Re: Smart-1 Cloud with 1530 Appliance and Remote Access VPN

G_W_Albrecht — Mon, 29 Nov 2021 09:00:53 GMT

The IP the GW is seen as from Internet side, "outside"...

Re: Smart-1 Cloud with 1530 Appliance and Remote Access VPN

dtrx — Tue, 30 Nov 2021 06:58:12 GMT

The problem is that 15xx has a partitial GAIA implementation which does not support Capsual under this circumstances. With endpoint client it should work.

Oliver

Re: Smart-1 Cloud with 1530 Appliance and Remote Access VPN

G_W_Albrecht — Thu, 02 Dec 2021 17:23:33 GMT

Check Point VPN clients

Connecting laptops/desktops with Check Point's VPN client software

Mobile client

Enable VPN remote access mobile clients to connect via Check Point Mobile VPN client (Capsule)

SSL VPN

Enable VPN remote access clients to connect via SSL VPN

Windows VPN Client

Enable VPN remote access clients to connect via native VPN client (L2TP)

Re: Smart-1 Cloud with 1530 Appliance and Remote Access VPN

Martin_Raska — Fri, 03 Dec 2021 08:37:52 GMT

Use the IP of ISP and Endpoint VPN client. I also think that Capsule is not supported on SMB.

Re: Smart-1 Cloud with 1530 Appliance and Remote Access VPN

G_W_Albrecht — Fri, 03 Dec 2021 09:43:04 GMT

You should have 92.107.40.xxx as Server IP in Step 2.

Re: Smart-1 Cloud with 1530 Appliance and Remote Access VPN

Martin_Raska — Fri, 03 Dec 2021 10:17:00 GMT

I meant the Capsule VPN PC version.

Re: Smart-1 Cloud with 1530 Appliance and Remote Access VPN

G_W_Albrecht — Fri, 03 Dec 2021 12:23:26 GMT

Both Capsule for iOS and Android are supported. You just did mean Check Point Mobile for Windows. but that is not called Capsule at all - only Capsule VPN (for Android) (previously Mobile VPN) and Capsule Connect (for iOS) (previously Mobile VPN).

Re: Smart-1 Cloud with 1530 Appliance and Remote Access VPN

Martin_Raska — Fri, 03 Dec 2021 12:28:18 GMT

no, I meant Check Point Capsule VPN for Windows - sk107536

Re: Smart-1 Cloud with 1530 Appliance and Remote Access VPN

G_W_Albrecht — Fri, 03 Dec 2021 14:17:16 GMT

Sorry, yes - old VPN Win PlugIn. Not supported by SMB, Only L2TP Win Client.