Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

Difference between VPN Clients and Mobile Access

In r80.10 Under the Gateway properties, there are the VPN Clients and Mobile Access tabs.

 

Whats the main difference between them? They both contain the options for the VPN clients, but the Mobile Access has more options. 

 

0 Kudos
8 Replies
Highlighted
Admin
Admin

IPSec VPN with clients is supported with and without Mobile Access Blade.
Mobile Access Blade supports a few more options, which are reflected in the relevant section of the gateway object.
0 Kudos
Highlighted

I've got the same VPN clients enabled under both headings. 

I'm wondering how changing the Authentication under VPN Clients and the Mobile Access properties vary.  Do they cause conflicts with each other if they don't match?

 

 

0 Kudos
Highlighted
Admin
Admin

I believe it depends on which "blade" (either IPsec or Mobile Access) is in charge as to which one will take effect.
0 Kudos
Highlighted

as the mobile client uses multiple blades, it's hard to tell which one is being used at which time for the authentication. I'm going to keep the two authentication areas matching each other for now.

When they are different, I'm getting different behaviors from different endpoints when connecting on the mobile client, but same behaviors when the authentication tabs match. I don't want to mess around with these settings much for testing as I don't have a test environment.

0 Kudos
Highlighted

In terms of network speed (i.e. ping, latency, app performance, etc.), which one should be faster?

VPN clients or SNX?
0 Kudos
Highlighted

VPN clients that use IPSec as the transport instead of SSL/TLS should be a little faster as there is less overhead associated with IPSec, but there are many other factors to consider.  IPSec is much more sensitive to intervening network issues such as low MTUs and fragmentation that can kill performance, whereas SSL/TLS handles it just fine.

Book "Max Power 2020: Check Point Firewall Performance Optimization" Third Edition
Now Available at www.maxpowerfirewalls.com
0 Kudos
Highlighted

This lengthy SK contains more than you ever wanted to know about Check Point's Remote Access solutions, and has a lot of handy comparison tables that will answer your question:

sk67820: Check Point Remote Access Solutions

 

Book "Max Power 2020: Check Point Firewall Performance Optimization" Third Edition
Now Available at www.maxpowerfirewalls.com
Highlighted
Sapphire

Broadly spoken and out of history, Endpoint/Enterprise RA VPN client uses IPsec VPN Blade, Mobile Access Blade uses SSL VPN (legacy name SNX).

0 Kudos