User Manual Part 2
Table Of Contents
- Using SmartDefense
- Using Antivirus and Antispam Filtering
- Overview
- Using VStream Antivirus
- Using VStream Antispam
- How VStream Antispam Works
- Header Marking
- Default Antispam Policy
- Enabling/Disabling VStream Antispam
- Viewing VStream Antispam Statistics
- Configuring the Content Based Antispam Engine
- Configuring the Block List Engine
- Configuring the IP Reputation Engine
- Configuring the VStream Antispam Policy
- Configuring the Safe Sender List
- Configuring VStream Antispam Advanced Settings
- Using Centralized Email Filtering
- Using Web Content Filtering
- Updating the Firmware
- Using Subscription Services
- Working With VPNs
- Overview
- Setting Up Your Safe@Office Appliance as a VPN Server
- Adding and Editing VPN Sites
- Viewing and Deleting VPN Sites
- Enabling/Disabling a VPN Site
- Logging in to a Remote Access VPN Site
- Logging Out of a Remote Access VPN Site
- Using Certificates
- Viewing VPN Tunnels
- Viewing IKE Traces for VPN Connections
- Viewing VPN Topology
- Managing Users
- Using Remote Desktop
- Controlling the Appliance via the Command Line
- Maintenance
- Viewing Firmware Status
- Upgrading Your Software Product
- Configuring a Gateway Hostname
- Configuring Syslog Logging
- Configuring HTTPS
- Configuring SNMP
- Setting the Time on the Appliance
- Using Diagnostic Tools
- Backing Up and Restoring the Safe@Office Appliance Configuration
- Using Rapid Deployment
- Resetting the Safe@Office Appliance to Defaults
- Running Diagnostics
- Rebooting the Safe@Office Appliance
- Using Network Printers
- Troubleshooting
- Specifications
- Glossary of Terms
- Index
Setting Up Your Safe@Office Appliance as a VPN Server
568 Check Point Safe@Office User Guide
To set up your Safe@Office appliance as a VPN Server
1. Configure the VPN Server in one or more of the following ways:
• To accept SecuRemote/SecureClient or Safe@Office remote access
connections from the Internet.
See Configuring the SecuRemote Remote Access VPN Server on page 569.
• To accept SecuRemo
te/SecureClient connections from your internal networks.
See Configuring the Internal VPN Server on page 571.
• To accept L2TP remo
te access connections from the Internet, as well L2TP
connections from your internal networks.
See Configuring the L2TP VPN Server on page 572.
2. If you config
ured the SecuRemote Internal VPN Server, install
SecuRemote/SecureClient on the desired internal network computers.
See Installing SecuRemote on page 573.
3. If you co
nfig
ured the L2TP VPN Server, do the following:
a. Configure the OfficeMode network.
See Configuring the OfficeMode Network on page 172.
All users connecting via L2TP will be assigned to the
OfficeMode
network.
b. Configure L2TP VPN Clients on the desired internal network computers.
See Configuring L2TP VPN Clients on page 574.
4. Set up rem
o
te VPN access for users.
See Setting Up Remote VPN Access for Users on page 650.
Note: Disabling the VPN Server for a specific type of connection (from
SecuRemote/SecureClient clients on the Internet, from SecuRemote/SecureClient
clients on internal networks, or from L2TP clients) will cause all existing VPN
tunnels of that type to disconnect.