Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
NorthernNetGuy
Advisor

Difference between VPN Clients and Mobile Access

In r80.10 Under the Gateway properties, there are the VPN Clients and Mobile Access tabs.

 

Whats the main difference between them? They both contain the options for the VPN clients, but the Mobile Access has more options. 

 

0 Kudos
8 Replies
PhoneBoy
Admin
Admin

IPSec VPN with clients is supported with and without Mobile Access Blade.
Mobile Access Blade supports a few more options, which are reflected in the relevant section of the gateway object.
0 Kudos
NorthernNetGuy
Advisor

I've got the same VPN clients enabled under both headings. 

I'm wondering how changing the Authentication under VPN Clients and the Mobile Access properties vary.  Do they cause conflicts with each other if they don't match?

 

 

0 Kudos
PhoneBoy
Admin
Admin

I believe it depends on which "blade" (either IPsec or Mobile Access) is in charge as to which one will take effect.
0 Kudos
NorthernNetGuy
Advisor

as the mobile client uses multiple blades, it's hard to tell which one is being used at which time for the authentication. I'm going to keep the two authentication areas matching each other for now.

When they are different, I'm getting different behaviors from different endpoints when connecting on the mobile client, but same behaviors when the authentication tabs match. I don't want to mess around with these settings much for testing as I don't have a test environment.

0 Kudos
Paul_Manalaysay
Explorer

In terms of network speed (i.e. ping, latency, app performance, etc.), which one should be faster?

VPN clients or SNX?
0 Kudos
Timothy_Hall
Champion
Champion

VPN clients that use IPSec as the transport instead of SSL/TLS should be a little faster as there is less overhead associated with IPSec, but there are many other factors to consider.  IPSec is much more sensitive to intervening network issues such as low MTUs and fragmentation that can kill performance, whereas SSL/TLS handles it just fine.

Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com
0 Kudos
Timothy_Hall
Champion
Champion

This lengthy SK contains more than you ever wanted to know about Check Point's Remote Access solutions, and has a lot of handy comparison tables that will answer your question:

sk67820: Check Point Remote Access Solutions

 

Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com
G_W_Albrecht
Legend
Legend

Broadly spoken and out of history, Endpoint/Enterprise RA VPN client uses IPsec VPN Blade, Mobile Access Blade uses SSL VPN (legacy name SNX).

CCSE CCTE CCSM SMB Specialist
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events