User guide

Setting Up Your Safe@Office Appliance as a VPN Server
608 Check Point Safe@Office User Guide
Note: The use of all Remote VPN Clients is subject to Check Point’s purchasing
terms and conditions.
To set up your Safe@Office appliance as a VPN Server
1. Configure the VPN Server in one or more of the following ways:
• To accept SecuRemote/SecureClient or Safe@Office remote access
connections from the Internet.
See Configuring the SecuRemote Remote Access VPN Server on page 609.
• To accept SecuRemote/SecureClient connections from your internal networks.
See Configuring the SecuRemote Internal VPN Server on page 610.
• To accept Endpoint Connect remote access connections from the Internet
and/or from your internal networks.
See Configuring the Endpoint Connect VPN Server on page 611.
• To accept L2TP remote access connections from the Internet, as well L2TP
connections from your internal networks.
See Configuring the L2TP VPN Server on page 612.
2. If you configured the SecuRemote Internal VPN Server, install
SecuRemote/SecureClient on the desired internal network computers.
See Installing SecuRemote on page 613.
3. If you configured both the SecuRemote Internal VPN Server and the Endpoint
Connect VPN Server, install Endpoint Connect on the desired internal network
computers.
See Installing Endpoint Connect on page 613.
4. If you configured the L2TP VPN Server, do the following:
a. Configure the OfficeMode network.
See Configuring the OfficeMode Network on page 214.
All users connecting via L2TP will be assigned to the OfficeMode network.
b. Configure L2TP VPN Clients on the desired internal network computers.
See Configuring L2TP VPN Clients on page 614.
5. Set up remote VPN access for users.