• See sk67820 - Check Point Remote Access Solutions.


• See sk86884 - Check Point Clients' support on Windows 8 and 8.1.

Table of Contents

• What's New in Remote Access Clients E75.20
• Remote Access Clients E75.20 Downloads
  • Management Server and Gateway Requirements
  • Client Downloads
  • Security Gateway Downloads
• Licensing
• Remote Access Clients E75.20 Documentation

	For more information on Endpoint Security releases, see the Endpoint Security releases map and Endpoint Security upgrade map.
	Visit our Remote & Mobile Access Clients forum to ask questions and get answers from technical peers and Support experts.

What's New in Remote Access Clients E75.20

The release of Endpoint Security VPN R75 introduced the Next Generation of SecureClient, including 64-bit support. This release, E75.20 Remote Access Clients, adds new features.

This section covers what's new in this release.

Secondary Connect

This feature provides access to multiple VPN gateways at the same time, to transparently connect to distributed resources.

• Connections to Distributed Networks: End-users can connect once and get transparent access to resources, regardless of their location. Tunnels are created dynamically, as needed, based on the destination of actual traffic.
• Enhanced Network Performance: Traffic flows directly from the endpoint user to the gateway, without site-to-site communication.
• Network Simplification: VPN tunnels and routing parameters are automatically taken from the network topology and destination server IP address.
• Seamless Upgrade from SecureClient: This release is compatible with legacy SecureClient settings. This unique feature is available only with Check Point VPN.

In an environment with Secondary Connect, the gateway that the client first authenticates to, is the Primary gateway. A gateway that the client connects to, through a secondary VPN, is a Secondary gateway. The Primary gateway must have the Secondary Connect Hotfix installed. See sk65312 - Enabling Secondary Connect for Remote Access Clients E75.20.

Third Party SCV Checks

This release supports SCV checks created by third party vendors, using the Remote Access Clients E75.20 SCV SDK. After installation, you can use these SCV checks in your SCV policies.

Note: Before using the Remote Access Clients SCV SDK, we strongly recommend that you read the Remote Access Clients SCV SDK Documentation.

Customized Initial Firewall Policy

A predefined desktop firewall policy can be attached to a client installation package. This policy is enforced when the client is installed.

Endpoint Security VPN for Unattended Machines

Endpoint Security VPN can be installed and managed locally on unattended machines, such as ATMs. Unattended clients are managed with CLI and API and do not have a User Interface.

Improved Remote Access Clients E75.20 API

The Remote Access Clients E75.20 API was changed in this version. It includes many improvements and backward compatibility support for future releases. Before using the API, read the Readme.txt inside the zip file.

Note: Before using the Remote Access Clients E75.20 API, we strongly recommend that you read the Remote Access Clients E75.20 API Documentation.

For more information, refer to:

• Remote Access Clients E75.20 Release Notes
• Remote Access Clients E75.20 Administration Guide
• sk65315: Remote Access Clients E75.20 Known Limitations
• sk65317: Remote Access Clients E75.20 Resolved Issues

Remote Access Clients E75.20 Downloads

Note: In order to download the Security Gateway Hotfix you will need to have a Software Subscription or Active Support plan.

Management Server and Gateway Requirements

Remote Access Clients E75.20 requires a supported gateway version. These Check Point versions support Remote Access Clients E75.20:

Note: Remote Access Clients cannot be installed on the same device as Check Point Endpoint Security R73 or E80. If Zone Alarm is installed on a device, you can install Check Point Mobile for Windows and SecuRemote, but not Endpoint Security VPN.

Client Downloads

• Remote Access Clients E75.20 (for Windows) msi file
  The Remote Access Clients E75.20 (for Windows) msi file is the installation file deployed on the endpoint machine.
  
  
• Remote Access Clients E75.20 (for Windows) Automatic Upgrade file
  The Remote Access Clients E75.20 (for Windows) Automatic Upgrade file allows you to automatically upgrade from a previous client version.
  
  
• Endpoint Security VPN E75.20 (for Windows) msi file for ATM
  The Endpoint Security VPN E75.20 (for Windows) msi file for ATM is the installation file deployed on ATM machines.
• Endpoint Security VPN E75.20 (for Windows) Automatic Upgrade file for ATM
  Endpoint Security VPN E75.20 (for Windows) Automatic Upgrade file for ATM file allows you to automatically upgrade from a previous client version for ATM devices.

Security Gateway Downloads

Important: Endpoint Security VPN R75/Remote Access Clients E75.x will not work if connected to R65 and R70 Security Gateways that do not include the hotfixes listed below.

Hotfix for R65 HFA 70 - When not using SecuRemote E75.x

• Security Gateway R65 HFA 70 Hotfix for enabling Endpoint Security VPN R75/Remote Access Clients E75.x - SecurePlatform and Linux
• Security Gateway R65 HFA 70 Hotfix for enabling Endpoint Security VPN R75/Remote Access Clients E75.x - IPSO 4.2
• Security Gateway R65 HFA 70 Hotfix for enabling Endpoint Security VPN R75/Remote Access Clients E75.x - Windows
• Security Gateway R65 HFA 70 Hotfix for enabling Endpoint Security VPN R75/Remote Access Clients E75.x - Solaris

Hotfix for R65 HFA 70 - When using SecuRemote E75.x (or if you have not yet applied the above hotfix on R65 HFA 70) (Recommended)

• Security Gateway R65 HFA 70 Hotfix for enabling Endpoint Security VPN R75/Remote Access Clients E75.x - SecurePlatform and Linux
• Security Gateway R65 HFA 70 Hotfix for enabling Endpoint Security VPN R75/Remote Access Clients E75.x - IPSO 4.2
• Security Gateway R65 HFA 70 Hotfix for enabling Endpoint Security VPN R75/Remote Access Clients E75.x - Solaris
• Security Gateway R65 HFA 70 Hotfix for enabling Endpoint Security VPN R75/Remote Access Clients E75.x - IPSO6
• Security Gateway R65 HFA 70 Hotfix for enabling Endpoint Security VPN R75/Remote Access Clients E75.x - Windows

Hotfix for R70.40

• Security Gateway R70.40 hotfix for enabling Endpoint Security VPN R75/Remote Access Clients E75.x - SecurePlatform and Linux
• Security Gateway R70.40 hotfix for enabling Endpoint Security VPN R75/Remote Access Clients E75.x - IPSO 6.2
• Security Gateway R70.40 hotfix for enabling Endpoint Security VPN R75/Remote Access Clients E75.x - Solaris

Licensing

• Endpoint Security VPN: On the Gateway, IPSec VPN Blade license. On the Management, Endpoint Container & Endpoint VPN Blade licenses for all installed endpoints.

• Check Point Mobile for Windows: On the Gateway, Mobile Access Blade license, IPSec VPN Blade license (IP Appliances also require the IPSec VPN Blade license.) Licenses are required per number of concurrent connections.

• SecuRemote: On the Gateway, IPSec VPN Blade license for an unlimited number of connections.

Which license is required to allow L2TP VPN tunnels

Question: In order to allow L2TP VPN tunnels, if the customer already has the Endpoint VPN Remote Access Blade - is this enough, or is there a Mobile Access Blade license required? Meaning, for L2TP, do we need a Endpoint VPN Client license or a Mobile Access License?

Answer: In order to allow L2TP VPN tunnels, you would just need the IPSec VPN license on the Security Gateway. There is no need for the Mobile Access License.

Remote Access Clients E75.20 Documentation

• sk56580: SecureClient Feature Support in Endpoint Security VPN R75/E75.x (SecureClient Next Generation)
• Remote Access Clients E75.20 Release Notes
• Remote Access Clients E75.20 Administration Guide
• Endpoint Security VPN E75.20 User Guide
• Check Point Mobile for Windows E75.20 User Guide
• SecuRemote E75.20 User Guide
• Remote Access Clients SCV SDK Guide
• SecureClient Upgrade Guides: Environments, with SecureClient already deployed, can be easily upgraded to Endpoint Security VPN, or Check Point Mobile for Windows. Users that had SecuRemote client can use the same steps to upgrade to SecuRemote E75.20. Note: The SmartDashboard for different versions of management servers is different. Use the documentation for the SmartDashboard that you have.
  
  
  • Remote Access Clients E75.20 Upgrade Guide from SecureClient/SecuRemote NGX on NGX R65 SmartCenter Server
  • Remote Access Clients E75.20 Upgrade Guide from SecureClient/SecuRemote NGX on R70 Security Management
  • Remote Access Clients E75.20 Upgrade Guide from SecureClient/SecuRemote NGX on R71 or R75 Security Management

Related Solution: sk67820 - Check Point Remote Access Solutions