User guide

Overview
Chapter 19: Working With VPNs 601
Chapter 19
This chapter describes how to use your Safe@Office appliance as a Remote Access VPN
Client, server, or gateway.
This chapter includes the following topics:
Overview .................................................................................................. 601
Setting Up Your Safe@Office Appliance as a VPN Server ..................... 607
Adding and Editing VPN Sites ................................................................ 621
Viewing and Deleting VPN Sites ............................................................. 654
Enabling/Disabling a VPN Site ................................................................ 654
Logging in to a Remote Access VPN Site ................................................ 655
Logging Out of a Remote Access VPN Site ............................................. 658
Using Certificates ..................................................................................... 658
Viewing VPN Tunnels ............................................................................. 670
Viewing IKE Traces for VPN Connections .............................................. 673
Viewing VPN Topology ........................................................................... 674
Overview
You can configure your Safe@Office appliance as part of a virtual private network (VPN).
A VPN is a private data network consisting of a group of gateways that can securely
connect to each other. Each member of the VPN is called a VPN site, and a connection
between two VPN sites is called a VPN tunnel. VPN tunnels encrypt and authenticate all
traffic passing through them. Through these tunnels, employees can safely use their
company’s network resources when working at home. For example, they can securely read
email, use the company’s intranet, or access the company’s database from home.
The Safe@Office appliance supports the following types of VPN sites:
• SecuRemote Remote Access VPN Server. Makes a network remotely available to
authorized users who connect to the Remote Access VPN Server using the
Check Point SecuRemote VPN Client (provided for free with your
Safe@Office) or another Safe@Office.
Working With VPNs