Difference between VPN Clients and Mobile Access

[NorthernNetGuy]

In r80.10 Under the Gateway properties, there are the VPN Clients and Mobile Access tabs.

Whats the main difference between them? They both contain the options for the VPN clients, but the Mobile Access has more options. 

[PhoneBoy]

IPSec VPN with clients is supported with and without Mobile Access Blade.
Mobile Access Blade supports a few more options, which are reflected in the relevant section of the gateway object.

[NorthernNetGuy]

I've got the same VPN clients enabled under both headings. 

I'm wondering how changing the Authentication under VPN Clients and the Mobile Access properties vary.  Do they cause conflicts with each other if they don't match?

[PhoneBoy]

I believe it depends on which "blade" (either IPsec or Mobile Access) is in charge as to which one will take effect.

[NorthernNetGuy]

as the mobile client uses multiple blades, it's hard to tell which one is being used at which time for the authentication. I'm going to keep the two authentication areas matching each other for now.

When they are different, I'm getting different behaviors from different endpoints when connecting on the mobile client, but same behaviors when the authentication tabs match. I don't want to mess around with these settings much for testing as I don't have a test environment.

[Paul_Manalaysay]

In terms of network speed (i.e. ping, latency, app performance, etc.), which one should be faster?

VPN clients or SNX?

[Timothy_Hall]

VPN clients that use IPSec as the transport instead of SSL/TLS should be a little faster as there is less overhead associated with IPSec, but there are many other factors to consider.  IPSec is much more sensitive to intervening network issues such as low MTUs and fragmentation that can kill performance, whereas SSL/TLS handles it just fine.

[Timothy_Hall]

This lengthy SK contains more than you ever wanted to know about Check Point's Remote Access solutions, and has a lot of handy comparison tables that will answer your question:

sk67820: Check Point Remote Access Solutions

[G_W_Albrecht]

Broadly spoken and out of history, Endpoint/Enterprise RA VPN client uses IPsec VPN Blade, Mobile Access Blade uses SSL VPN (legacy name SNX).