First of all I'd rather use ssh and tunnelled connections if it is possible..simple and secure answer for your vpn needs..
Though I did not spend time on clientless VPN the idea seems simple. 1- Enable clientless VPN on gateway 2- Add a certificate to gateway 3- Add a rule (service http user auth, or aut. client auth.) 4- Add a certificate to client (optional) The logic is;gateway will intercept all the http connections that match the rule and the client starts a new the ssl connection (re-direction?). Connection between the client and the gateway is encrypted (ssl). Gateway establishes a second cleartext connection to http server.. Basically gateways acts like an ssl offloader (accelerator) for the http connections. cheers, - yinal ozkan I would only use this when my full PKI deployment requires SSL auth and my sec policy requires authentication at perimeter.And never think about other services else than http.. --- Leonardo Boulton <[EMAIL PROTECTED]> wrote: > Yes, it came to my mind the clientless VPN (which actually I understand > is not a new feature of NG FP3 but they just renamed it). > Have you used this?... Can you give me a main idea of the way it works > before I put my hands on it?. > > Thanks, > > LB > > On Sun, 2003-01-05 at 01:28, Efes wrote: > If your gateway is NG FP3 you may try clientless VPN feature over http. > By the way Checkpoint is working on TCP Tunnelling-TCPT (another beta program) > > fyi, > - yinal ozkan > > --- Leonardo Boulton <[EMAIL PROTECTED]> wrote: > > Hi lads, > > > > Can any of you tell me of a way to establish remote VPN connections from > > a Linux workstation ( other than the SecureClient Beta program) to a > > Check Point gateway?. > > > > Cheers, > > > > LB > > > > > > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
