Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Nickel

Checkpoint SecuRemote vs. Capsule IP space

Can someone explain to me why I am not getting the same client remote access IP address space when I use Checkpoint SecuRemote as compared to Checkpoint Capsule? 

When I connect to the same 1100 gateway using my phone with Checkpoint Capsule I get the ip of 172.16.x.x as configured on the gateway.  When I connect to the same 1100 gateway using my Windows 10 machine with SecuRemote the virtual interface/Office mode IP gets an ip of 192.168.0.2.  When I watch the packets on the gateway from the Windows 10 machine I see that the source IP as the ip address of the network (10.10.x.x) I am connected to while initiating the VPN. (hope that makes sense).  I would expect a 172.16.x.x assigned when I use Checkpoint SecuRemote.  Am I missing something in the configuration of the client or the gateway?

Thanks,

Bill

Tags (2)
0 Kudos
6 Replies
Highlighted
Admin
Admin

SecuRemote does not support Office Mode, which is required to be assigned the 172.16.x.x address as you've configured.

You need to install the VPN client as Check Point Mobile to leverage Office Mode (and have appropriate license to use it).

Highlighted
Iron

Using cpview on R80.20, I can see a number of "Office Mode assigned IPs". Is this the number I need to count against my licensed SSL/MOB user blade?
0 Kudos
Highlighted
Admin
Admin

Believe so, yes.
0 Kudos
Highlighted
Iron

My question "number of Office Mode assigned IPs to count against licensed SSL/MOB user blade" was a bit off-topic.
From personal experience I can now confirm that this applies and it´s a hard limit.
0 Kudos
Highlighted
Sapphire

Most easy way to get to mobile is found here: Changing the Standalone Remote Access Client flavor 

0 Kudos
Highlighted
Sapphire

Does it work now as expected ?