Support Center > Search Results > SecureKnowledge Details
Support Center
The information you are about to copy is INTERNAL! DO NOT share it with anyone outside Check Point.
 Print    Email
Check Point Remote Access Solutions

Solution ID: sk67820
Product: Endpoint Security VPN, SecuRemote, Check Point Mobile, Check Point GO, Mobile Access / SSL VPN, Endpoint Security Client, Check Point Mobile VPN, Check Point Mobile Enterprise
Version: E80.40, E80.41, E80.42, E80.50, E80.51, E75, E75.10, E75.20, E75.30, E80, E80.10, E80.20, E80.30, E80.32, E80.60
OS: Windows, Mac, iOS, Android
Platform / Model: All
Date Created: 25-Dec-2013
Last Modified: 18-Feb-2015
Rate this document
[1=Worst,5=Best]
Solution

Table of Contents

  • Providing Secure Remote Access
  • Types of Solutions
    • SSL VPN Portal for published business application
    • Layer-3 VPN Tunnel
    • Layer-3 VPN Tunnel integrated with Endpoint Security
    • Additional Remote Access Solutions
  • Summary of Remote Access Options
  • VPN Client Version and Supported OS
  • VPN Client Version and supported Gateway Version

 

Providing Secure Remote Access

In today's business environment, it is clear that workers require remote access to sensitive information from a variety of locations and a variety of devices. Organizations must also make sure that their corporate network remains safe and that remote access does not become a weak point in their IT security.

This article will:

  • Help you decide which remote access client or clients best match your organization's requirements.
  • Give you information about Check Point's secure remote access options.

 

Types of Solutions

All of Check Point's Remote Access solutions provide:

  • Enterprise-grade, secure connectivity to corporate resources.
  • Strong user authentication.
  • Granular access control.

Factors to consider when choosing remote access solutions for your organization:

  • L3 VPN tunnel vs. Secure Business portal: Do you need a full VPN tunnel to protect the access from any installed application to the business, or do you need a simpler business portal that provides simple and secure access for published business applications?
  • Client-Based vs. Clientless: Does the solution require an agent to be installed on the endpoint computer, or is it clientless, for which only a web browser is required?
  • Secure Connectivity vs. Endpoint Security: Does the solution provide only secure connectivity, or also additional endpoint security functionalities, when the device is not connected via a VPN tunnel to the business?

 

SSL VPN Portal for published business application

  • Allows simple and secure usage of business resources from any PC, Mac, Smartphones and tablets.
  • Access business resources such as web-applications
  • Two factor user authentication
  • Secure access to published apps via any supported Internet Browser or a dedicated Smartphone/tablet app
  • Best fit for unmanaged-devices and "BYOD"
  • License required: Check Point Mobile on the Security Gateway. License count per concurrent connected devices.
Name Supported Operating Systems Client or Clientless Encryption Protocol Latest Version & Relevant Link Security Verification for Endpoint Devices Desktop Firewall on Endpoint Devices IPv6 Support

 

Mobile Access Web Portal

 

  • Windows
  • Linux
  • Mac OS
  • iOS
  • Android

Clientless

SSL

R77

sk92965

Yes

No

Yes

R77.10 and higher

 

SSL Network Extender for Mobile Access Blade

 

  • Windows
  • Linux
  • Mac OS

On-demand Client through Mobile Access Portal

SSL

E75

sk65210

Yes

No

 

Check Point Mobile for iPhone and iPad
iOS Client SSL

1.3

sk59120

No No

 

Capsule Workspace for iOS (previously Mobile Enterprise)
iOS Client SSL sk92552

Yes

Jailbreak & Root Detection

MDM Cooperative Enforcement (sk98201)

No

Yes

R77.10 and higher

Check Point Mobile for Android
Android Client SSL

1.0.85

sk65314
No No

 

Capsule Workspace for Android (previously Mobile Enterprise)
Android Client SSL sk93775 Yes

Jailbreak & Root Detection

MDM Cooperative Enforcement (sk98201)

No

Yes

R77.10 and higher

 

Layer-3 VPN Tunnel

  • Secure access to the business from any installed application via a Layer-3 VPN tunnel
  • Two factor user authentication
  • Requires a VPN agent/app installation
  • Best fit for both managed or unmanaged-devices
  • License required: Check Point Mobile on the Security Gateway. License count per concurrent connected devices.
Name Supported Operating Systems Client or Clientless Encryption Protocol Latest Version & Relevant Link Security Verification for Endpoint Devices Desktop Firewall on Endpoint Devices IPv6 Support
Check Point Mobile for Windows
Windows
Endpoint Security E80.51 supports Windows 8.1
Client IPsec E80.60 (sk102651) Yes No No
Capsule Connect (for iOS) (previously Mobile VPN)
iOS Client IPsec / SSL sk69540 MDM Cooperative Enforcement (sk98201) No No
Capsule VPN (for Android) (previously Mobile VPN)
Android 4+ Client IPsec / SSL sk84141 MDM Cooperative Enforcement (sk98201) No No
Check Point VPN Plugin for Windows 8.1
Windows 8.1 Preinstalled client SSL

1.0.0.1

sk96006

No No No

 

Layer-3 VPN Tunnel integrated with Endpoint Security

  • A full Layer-3 VPN tunnel integrated with enterprise grade endpoint security software blades.
  • Two factor user authentication.
  • Additional Endpoint Security functionalities - from desktop firewall and till full endpoint security software blades - such as Disk Encryption, Media Encryption, Anti Malware, and more.
  • Requires a VPN agent/app installation.
  • Best fit for managed devices.
  • License required: Endpoint Security Container and Endpoint Security VPN software blades. License count per installed devices.
Name Supported Operating Systems Client or Clientless Encryption Protocol Latest Version & Relevant Link Security Verification for Endpoint Devices Desktop Firewall on Endpoint Devices IPv6 Support
Endpoint Security VPN for Windows
Windows
Endpoint Security E80.51 supports Windows 8.1
Client IPsec E80.60 (sk102651) Yes Yes No
Endpoint Security VPN for Mac
Mac OS Client IPsec E80.41 (sk91181),
E80.50 (sk92971)
No Yes No
Endpoint Security Suite Remote Access VPN Blade

Windows
Endpoint Security E80.51 supports Windows 8.1

Mac OS

Client IPsec E80.60 (sk102651) Yes Yes No

 

Additional Remote Access Solutions

Name Supported Operating Systems Client or Clientless Encryption Protocol Latest Version & Relevant Link Security Verification for Endpoint Devices Desktop Firewall on Endpoint Devices IPv6 Support
SecuRemote
Windows
Endpoint Security E80.51 supports Windows 8.1
Client IPsec E80.60 (sk102651) No No No
Check Point GO VPN
Windows Clientless
Requires a Check Point GO device
SSL R75 HFA5
Release Notes
Yes No No

 

Summary of Remote Access Options

Below is a summary of each Remote Access option that Check Point offers. All supply secure remote access to corporate resources, but each has different features and meets different organizational requirements.

 

Mobile Access Web Portal

The Mobile Access Portal is a clientless SSL VPN solution. It is recommended for users who require access to corporate resources from home, an internet kiosk, or another unmanaged computer. The Mobile Access Portal can also be used with managed devices.

It provides:

  • Secure Connectivity
  • Security Verification

The Mobile Access Portal supplies access to web-based corporate resources. You can use the on-demand client, SSL Network Extender, via the Portal to access all types of corporate resources.

Required Licenses: Mobile Access Software Blade on the gateway.

Supported Platforms: Windows, Mac OS X, Linux, IOS and Android

Where to Get the Client: Included with the Security Gateway

 

SSL Network Extender

SSL Network Extender is a thin SSL VPN on-demand client installed automatically on the user's machine via a web browser. It supplies access to all types of corporate resources.

SSL Network Extender has two modes:

  • Network Mode: Users can access all application types (Native-IP-based and Web-based) in the internal network. To install the Network Mode client, users must have administrator privileges on the client computer. Supported Platforms: Windows, Mac OS X, Linux
  • Application Mode: Users can access most application types (Native-IP-based and Web-based) in the internal network, including most TCP applications. The user does not require administrator privileges on the endpoint machine. Supported Platforms: Windows

Required Licenses: Mobile Access Software Blade and IPSec VPN Blade on the gateway

Where to Get the Client: Included with the Security Gateway

 

Check Point VPN Plugin for Windows 8.1

Check Point VPN Plugin for Windows 8.1 is an L3 VPN client. It supplies secure connectivity and access to corporate resources using L3 SSL VPN Tunnel.

Required Licenses: Mobile Access Software Blade on the gateway

Supported Platforms: Windows 8.1

Where to Get the Client: Preinstalled with Windows.

 

SecuRemote

SecuRemote is a secure, but limited-function IPsec VPN client. It provides secure connectivity.

Required Licenses: IPsec VPN Software Blade on the gateway. It is a free client and does not require additional licenses.

Supported Platforms: Windows

Where to Get the Client: Check Point Support Center

 

Check Point Mobile for Windows

Check Point Mobile for Windows is an IPsec VPN client. It is best for medium to large enterprises that do not require an Endpoint Security policy.

It provides:

  • Secure Connectivity
  • Security Verification

Required Licenses: IPsec VPN and Mobile Access Software Blades on the gateway.

Supported Platforms: Windows

Where to Get the Client: Check Point Support Center

 

Endpoint Security VPN

Endpoint Security VPN is an IPsec VPN client that replaces SecureClient. It is best for medium to large enterprises.

It provides:

  • Secure Connectivity
  • Security Verification
  • Endpoint Security that includes an integrated Desktop Firewall, centrally managed from the Security Management Server.

Required Licenses: The IPsec VPN Software Blade on the gateway, an Endpoint Container license, and an Endpoint VPN Software Blade license on the Security Management Server.

Supported Platforms: Windows

Where to Get the Client: Check Point Support Center

Note: Endpoint Security VPN for Mac OS X includes a Desktop Firewall, but not Security Verification.

 

Endpoint Security Suite

The Endpoint Security Suite simplifies endpoint security management by unifying all endpoint security capabilities in a single console and a single client. Endpoint Security Software Blades include: Desktop Firewall and Security Verification, Full Disk Encryption, Media Encryption and Port Protection, Anti-Malware and Program Control, WebCheck browser virtualization and Remote Access VPN.

Starting from Endpoint Security E80.41, Remote Access VPN Clients are part of the Endpoint Security offering, providing the next release of E75.30, including all flavors. The E75 Remote Access Clients series was previously known as Endpoint Security VPN R75.

(Remote Access Clients E75.30 (Endpoint Security VPN) replaced SecureClient, including 64-bit support. It replaced both SecureClient and Endpoint Connect.)

Required Licenses:

Management: Endpoint Policy Management Software Blade.

Client: Endpoint Security Container and Endpoint Security Software Blades - for any protected endpoint.

Supported Platforms: Windows

Where to Get the Client: Check Point Support Center

 

Check Point Mobile for iPhone and iPad

Check Point Mobile for iPhone and iPad is an SSL VPN client. It supplies secure connectivity and access to web-based corporate resources and Exchange ActiveSync. Check Point Mobile for iPhone and iPad is ideal for mobile workers who have iPhone or iPad devices.

Required Licenses: Mobile Access Software Blade on the gateway

Supported Platforms: iOS

Where to Get the Client: Apple App Store

 

Capsule Workspace for iOS

Capsule Workspace for iOS is an SSL VPN client. It supplies secure connectivity and access to web-based corporate resources and Microsoft Exchange services. It also gives secure access to Capsule Docs protected documents. It was previously called Mobile Enterprise.

Capsule Workspace is ideal for mobile workers who have privately-owned smart phones or tablets. It protects only the business data inside the App and does not require device-level security measures, such as device-lock or device-wipe.

Required Licenses: Capsule license on the gateway

Supported Platforms: iOS

Where to Get the Client: Apple App Store

 

Capsule Connect (for iOS)

Capsule Connect is a full L3 tunnel App that gives users network access to all mobile applications. It supplies secure connectivity and access to all types of corporate resources. It was previously called Mobile VPN.

Required Licenses: Mobile Access Software Blade on the gateway

Supported Platforms: iOS 6.0 +

Where to Get the Client: Apple App Store

 

Check Point Mobile for Android

Check Point Mobile for Android is an SSL VPN client. It supplies secure connectivity and access to web-based corporate resources and Exchange ActiveSync. Check Point Mobile for Android is ideal for mobile workers who have Android devices.

Required Licenses: Mobile Access Software Blade on the gateway

Supported Platforms: Android

Where to Get the Client: Google Play Store

 

Capsule Workspace for Android

Capsule Workspace for Android is an SSL VPN client. It supplies secure connectivity and access to web-based corporate resources and Microsoft Exchange services. It also gives secure access to Capsule Docs protected documents. It was previously called Mobile Enterprise.

Capsule Workspace for Android is ideal for mobile workers who have privately-owned smart phones or tablets. It protects only the business data inside the App and does not require device-level security measures, such as device-lock or device-wipe.

Required Licenses: Capsule license on the gateway

Supported Platforms: Android

Where to Get the Client: Google Play Store

 

Capsule VPN (for Android)

Capsule VPN for Android devices is an L3 VPN client. It supplies secure connectivity and access to corporate resources using L3 IPSec/SSL VPN Tunnel. It was previously called Mobile VPN.

Required Licenses: Mobile Access Software Blade on the gateway

Supported Platforms: Android 4 + (ICS+)

Where to Get the Client: Google Play Store

 

Check Point GO

Check Point GO is a portable workspace with virtualized Windows applications, on a secure and encrypted USB Flash Drive. Users insert the USB device into a host PC and securely access their workspace and corporate resources via SSL VPN technology. Check Point GO is ideal for mobile workers, contractors, and disaster recovery. The virtual workspace is segregated from the host PC and controls the applications and data that can run in Check Point GO.

It provides:

  • Secure Connectivity
  • Security Verification

Required Licenses: IPsec VPN Software Blade on the gateway and Check Point GO devices.

Supported Platforms: Windows

Where to Get the Client: Check Point Support Center

 


 

Which license is required to allow L2TP VPN tunnels

Question: In order to allow L2TP VPN tunnels, if the customer already has the Endpoint VPN Remote Access Blade - is this enough, or is there a Mobile Access Blade license required? Meaning, for L2TP, do we need a Endpoint VPN Client license or a Mobile Access License?

Answer: In order to allow L2TP VPN tunnels, you would just need the IPSec VPN license on the Security Gateway. There is no need for the Mobile Access License.


For information about Check Point products support for Windows 7, see sk43446.

For information about Check Point products support for Windows 8, see sk87980.

 

VPN Client Version and Supported OS

VPN Client Version and Supported OS
Client Name + Version Client OS platform Client OS Version
Endpoint Security E80.60

Windows

Mac OS X

  • Windows 8.1 32/64-bit 
  • Windows 8 32/64-bit 
  • Windows 7 32/64-bit (All editions)
  • Windows Vista 32/64-bit (SP1 and above)
  • Windows XP 32-bit (SP3)
  • Mac OS X 10.10 Yosemite
Endpoint Security E80.51 Windows
  • Windows 8.1 32/64-bit
  • Windows 8 32/64-bit
  • Windows 7 32/64-bit (All editions)
  • Windows Vista 32/64-bit (SP1 and above)
  • Windows XP 32-bit (SP2 and above)
Endpoint Security Client E80.50.03 for Mac Mac OS X
  • Mac OS X 10.7 Lion (64-bit)
  • Mac OS X 10.8 Mountain Lion (64-bit)
  • Mac OS X 10.9 Mavericks (64-bit)
Endpoint Security E80.50

Windows

Mac OS X

  • Windows XP Home, Professional editions SP3 32-bit
  • Windows Vista Enterprise, Professional editions SP1 64-bit
  • Windows Vista Enterprise, Professional editions SP2 32-bit
  • Windows 7 Enterprise, Professional, Ultimate editions (32-bit and 64-bit)
  • Windows 7 Enterprise, Professional, Ultimate editions SP1 (32-bit and 64-bit)
  • Windows 8 Enterprise, Professional editions (32-bit and 64-bit) (For new client installations only)
  • Windows Server 2003 SP2 32-bit (Note: only some software blades - see Release Notes)
  • Windows Server 2008 SP1 (32-bit and 64-bit) (Note: only some software blades - see Release Notes)
  • Windows Server 2008 SP2 (32-bit and 64-bit) (Note: only some software blades - see Release Notes)
  • Windows Server 2008 R2 (Note: only some software blades - see Release Notes)
  • Windows Server 2008 R2 SP1 (Note: only some software blades - see Release Notes)
  • Mac OS X 10.6 Snow Leopard (32-bit and 64-bit)
  • Mac OS X 10.7 Lion (32-bit and 64-bit)
  • Mac OS X 10.8 Mountain Lion (64-bit)
  • Mac OS X 10.9 Mavericks (64-bit)
Endpoint Security E80.42

Windows

Mac OS X

  • Windows XP Home, Professional editions SP3 32-bit
  • Windows Vista Enterprise, Professional editions SP1 or higher (32-bit and 64-bit)
  • Windows 7 Enterprise, Professional, Ultimate editions (32-bit and 64-bit)
  • Windows 7 Enterprise, Professional, Ultimate editions SP1 (32-bit and 64-bit)
  • Windows 8 Enterprise, Professional editions (32-bit and 64-bit) (For new client installations only)
  • Windows 8.1 Enterprise, Professional editions (32-bit and 64-bit) (For new client installations only)
  • Windows Server 2003 32-bit (Note: only some software blades - see Release Notes)
  • Windows Server 2008 (32-bit and 64-bit) (Note: only some software blades - see Release Notes)
  • Windows Server 2008 R2 (Note: only some software blades - see Release Notes)
  • Mac OS X 10.6 Snow Leopard (32-bit and 64-bit)
  • Mac OS X 10.7 Lion (32-bit and 64-bit)
  • Mac OS X 10.8 Mountain Lion (64-bit)
  • Mac OS X 10.9 Mavericks (32-bit and 64-bit)
Endpoint Security E80.41

Windows

Mac OS X

  • Windows XP Home, Professional editions SP3 32-bit
  • Windows Vista SP1 (32-bit and 64-bit)
  • Windows 7 Enterprise, Professional, Ultimate editions (32-bit and 64-bit)
  • Windows 7 Enterprise, Professional, Ultimate editions SP1 (32-bit and 64-bit)
  • Windows 8 Enterprise, Professional editions (32-bit and 64-bit) (For new client installations only)
  • Windows Server 2003 32-bit (Note: only some software blades - see Release Notes)
  • Windows Server 2008 (32-bit and 64-bit) (Note: only some software blades - see Release Notes)
  • Windows Server 2008 R2 (Note: only some software blades - see Release Notes)
  • Mac OS X 10.6 Snow Leopard (32-bit and 64-bit)
  • Mac OS X 10.7 Lion (32-bit and 64-bit)
  • Mac OS X 10.8 Mountain Lion (64-bit)
  • Mac OS X 10.9 Mavericks (64-bit)
Endpoint Security E80.40

Windows

Mac OS X

  • Windows XP Home, Professional editions SP3 32-bit
  • Microsoft Vista SP1 (32-bit and 64-bit)
  • Windows 7 Enterprise, Professional, Ultimate editions (32-bit and 64-bit)
  • Windows 7 Enterprise, Professional, Ultimate editions SP1 (32-bit and 64-bit)
  • Windows Server 2003 32-bit (Note: only some software blades - see Release Notes)
  • Windows Server 2008 R2 (Note: only some software blades - see Release Notes)
  • Mac OS X 10.6 Snow Leopard
  • Mac OS X 10.7 Lion
  • Mac OS X 10.8 Mountain Lion
Endpoint Security E80.30 / E80.32 Windows
  • Windows XP Home, Professional editions SP3 32-bit
  • Windows Vista (32-bit and 64-bit)
  • Windows 7 Enterprise, Professional, Ultimate editions (32-bit and 64-bit)
  • Windows 7 Enterprise, Professional, Ultimate editions SP1 (32-bit and 64-bit)
  • Windows Server 2008 (32-bit and 64-bit) (Note: only some software blades - see Release Notes)
  • Windows Server 2008 R2 (Note: only some software blades - see Release Notes)
Endpoint Security E80.20 Windows
  • Windows XP Home, Professional editions SP3 32-bit
  • Windows Vista (32-bit and 64-bit)
  • Windows 7 Enterprise, Professional, Ultimate editions (32-bit and 64-bit)
  • Windows 7 Enterprise, Professional, Ultimate editions SP1 (32-bit and 64-bit)
Endpoint Security E80 / E80.10 Windows
  • Windows XP Home, Professional editions SP3 32-bit
  • Windows 7 Enterprise, Professional, Ultimate editions (32-bit and 64-bit)
  • Windows 7 Enterprise, Professional, Ultimate editions SP1 (32-bit and 64-bit)
Endpoint Security VPN R75 / E75.10 / E75.20 / E75.30 Windows
  • Windows XP 32-bit SP3
  • Windows Vista SP1 (32-bit and 64-bit)
  • Windows 7, all editions (32-bit and 64-bit), with and without SP1
  • Windows 8, all editions 32-bit and 64-bit (E75.30 only)
Check Point Mobile for Windows E75.10 / E75.20 / E75.30 Windows
  • Windows XP Home, Professional editions SP3 32-bit
  • Windows Vista SP1 (32-bit and 64-bit)
  • Windows 7, all editions (32-bit and 64-bit), with and without SP1
  • Windows 8, all editions (32-bit and 64-bit) (E75.30 only)
SecuRemote E75.10 / E75.20 / E75.30 Windows
  • Windows XP Home, Professional editions SP3 32-bit
  • Windows Vista SP1 (32-bit and 64-bit)
  • Windows 7, all editions (32-bit and 64-bit), with and without SP1
  • Windows 8, all editions (32-bit and 64-bit) (E75.30 only)
Endpoint Security VPN E75 Mac OS X
  • Mac OS X 10.6 Snow Leopard (32-bit and 64-bit)
  • Mac OS X 10.7 Lion (32-bit and 64-bit)
Endpoint Security VPN E75.01 Mac OS X
  • Mac OS X 10.6 Snow Leopard (32-bit and 64-bit)
  • Mac OS X 10.7 Lion (32-bit and 64-bit)
  • Mac OS X 10.8 Mountain Lion (32-bit and 64-bit)
SSL Network Extender for Mobile Access Blade

Windows

Linux

Mac OS X

Windows

  • XP Home and Professional (SP2, SP3) (32-bit and 64-bit)
  • Vista (SP1) (32-bit and 64-bit)
  • Windows 7 (including SP1) Ultimate, Enterprise, Professional, and Home (32-bit and 64-bit)
  • Windows 8 (all versions and editions, not including Windows RT)

Note: SSL Network Extender is not supported on 64-bit browsers on Windows OS prior to Windows 8. SSL Network Extender is supported on 64-bit IE 10 in Windows 8.

Macintosh

  • Mac OS X 10.6.8 (32-bit and 64-bit)
  • Mac OS X 10.7, 10.7.1, 10.7.2, 10.7.3, 10.7.4, 10.7.5 (Lion) (32-bit and 64-bit)
  • Mac OS X 10.8, 10.8.1, 10.8.2 (Mountain Lion) (64-bit), 10.8.4, 10.8.5
  • Mac OS X 10.9.5
  • Mac OS X 10.10 (Yosemite), 10.10.2

Linux

  • Ubuntu 11.10, 12.04, 12.04 LTS, 12.10 (32-bit and 64-bit), 14.04 LTS, 14.10
  • openSUSE 11.4 (32-bit and 64-bit)
  • openSUSE 12.2 (32-bit and 64-bit)
  • openSUSE 13.1, 13.2
  • Fedora 15, 16, 18 (32-bit and 64-bit), 20, 21 (Requires xterm (standard terminal emulator) for deployment)
  • RHEL 4.9, 5.7 and 6.1 (32-bit and 64-bit), 5.11 6.6, 7
SSL Network Extender for VPN-1 Portal Windows

Linux

Mac OS X

Windows

  • XP Home and Professional (SP2, SP3) (32-bit and 64-bit)
  • Vista (SP1) (32-bit and 64-bit)
  • Windows 7 (including SP1) Ultimate, Enterprise, Professional, and Home (32-bit and 64-bit)
  • Windows 8 (all versions and editions, not including Windows RT)

Note: SSL Network Extender is not supported on 64-bit browsers in Windows prior to Windows 8. SSL Network Extender is supported on 64-bit IE 10 in Windows 8.

Macintosh

  • Mac OS X 10.6.8 (32-bit and 64-bit)
  • Mac OS X 10.7, 10.7.1, 10.7.2, 10.7.3, 10.7.4, 10.7.5 (Lion) (32-bit and 64-bit)
  • Mac OS X 10.8, 10.8.1, 10.8.2 (Mountain Lion) (64-bit), 10.8.4, 10.8.5
  • Mac OS X 10.9.5
  • Mac OS X 10.10.2

Linux

  • Ubuntu 11.10, 12.04, 12.04 LTS, 12.10 (32-bit and 64-bit), 14.04 LTS, 14.10
  • openSUSE 11.4 (32-bit and 64-bit)
  • openSUSE 12.2 (32-bit and 64-bit)
  • openSUSE 13.1, 13.2
  • Fedora 15, 16, 18 (32-bit and 64-bit), 20, 21 (Requires xterm (standard terminal emulator) for deployment)
  • RHEL 4.9, 5.7, 5.11, 6.1 (32-bit and 64-bit), 6.6, 7
Check Point Mobile for iPhone and iPad iOS

iOS 6.0 +

See AppStore

Check Point Mobile Enterprise for iPhone and iPad iOS

iOS 6.0 +

See AppStore

Check Point Mobile VPN for iOS iOS

iOS 6+

See AppStore

Check Point Mobile for Android Android

Android 4.0 +

See Google Play

Check Point Mobile Enterprise for Android Android

Android 4.0 +

See Google Play

Check Point Mobile VPN for Android Android

4.0 + (ICS+)

See Google Play

Check Point GO R75 and above Windows
  • Windows XP Home, Professional editions SP3 32-bit
  • Windows Vista Home Basic/Premium, Business, Ultimate SP2 or higher (32-bit and 64-bit)
  • Windows 7 Home Premium, Professional, Ultimate Official release or higher (32-bit and 64-bit)
Check Point VPN Plugin for Windows 8.1 Windows 8.1 Preinstalled with Windows.
Legacy Clients
Secure Client / SecuRemote NGX R60 HFA3 Windows
  • Windows XP Home, Professional editions SP3
  • Windows Vista Enterprise SP1
  • Windows 7 Enterprise and Ultimate editions (32-bit)
Endpoint Connect R73 and above Windows
  • Windows 2000 Professional 32-bit with SP1-4
  • Windows XP Home & Professional 32-bit, with or without SP1-3
  • Windows Vista 32-bit and 64-bit, with or without SP1
  • Windows 7 32-bit and 64-bit, Premium or Enterprise
Endpoint Security R73 and above Windows
  • Windows XP (Professional SP2 or higher) 32-bit only
  • Windows Vista (Enterprise/Business SP1 or higher) 32-bit and 64-bit
  • Windows 7 (Enterprise/Professional/Ultimate) 32-bit and 64-bit
  • Windows 7 SP1 32-bit and 64-bit (starting from R73 HFA 3).

 

VPN Client Version and supported Gateway Version (R71, R75, VSX R67 and R77)

VPN Client Version and supported Gateway Version
Client Name + Version Client OS platform R71/SG80 R71 R75 VSX R67 R77
Endpoint Security E80-E80.30 Windows R71 and above R75 and above VSX R67 and above Supported
Endpoint Security E80.40 and above Windows

R71.30 and above

R71.50 and above (Including Secondary Connect for E75.20/E80.40 and above)
R75 and above

Secondary Connect is supported in:

  • R75.20 + HF (sk65312)
  • R75.40 and above (includes R75.40VS)
VSX R67.10 and above Supported
Endpoint Security VPN R75 / E75.10 and above Windows

R71.30 and above

R71.50 and above (Including Secondary Connect for E75.20 and above)
R75 and above

Secondary Connect is supported in:

  • R75.20 + HF (sk65312)
  • R75.40 and above (includes R75.40VS)
VSX R67.10 and above Supported
Check Point Mobile for Windows E75.10 and above Windows R71.50 and above (Including Secondary Connect for E75.20 and above) R75 and above

Secondary Connect is supported in:

  • R75.20 + HF (sk65312)
  • R75.40 and above (includes R75.40VS)
Mobile Access license is required. On IPSO, Windows and VSX gateways there is no need to turn on Mobile Access in SmartDashboard. Supported
SecuRemote E75.10 and above Windows R71.50 and above (Including Secondary Connect for E75.20+) R75.10 and above

Secondary Connect is supported in:

  • R75.20 + HF (sk65312)
  • R75.40 and above (includes R75.40VS)
VSX R67.10 and above Supported
Endpoint Security E80.40 and above Mac OS X R71.30 and above R75 and above VSX R67.10 and above Supported
Endpoint Security VPN E75 and above Mac OS X R71.30 and above R75 and above VSX R67.10 and above Supported
SSL Network Extender for Mobile Access Blade

Windows

Linux

Mac OS
R71 and above R75 and above SecurePlatform/Gaia only Supported
SSL Network Extender for IPSec VPN-1 Portal Windows

Linux

Mac OS

R71 and above

SG80 R71 and above

R75 and above VSX R67 and above Supported
Check Point Mobile for iPhone and iPad iOS R71.30 and above R75.20 and above   Replaced by Check Point Mobile Enterprise for iPhone and iPad
Check Point Mobile Enterprise for iPhone and iPad iOS       R77.10 and above
Check Point Mobile VPN for iOS iOS R71.50 and above R75.40 and above (includes R75.40VS) Mobile Access license is required. On IPSO, Windows and VSX gateways there is no need to turn on Mobile Access in SmartDashboard. Supported
Check Point Mobile for Android Android

R71.30 + HF

R71.50 and above

R75.20 + HF

R75.40 and above

  Supported
Check Point Mobile Enterprise for Android Android       R77.10 and above
Check Point Mobile VPN for Android Android R71.50 and above R75.40 and above (includes R75.40VS) Mobile Access license is required. On IPSO, Windows and VSX gateways there is no need to turn on Mobile Access in SmartDashboard. Supported
Check Point GO R75 and above Windows R71 and above R75 and above (includes R75.40VS) On R71 to R71.30, GO does not work if the Mobile Access Software Blade is enabled.

On R71.40, GO does work with the Mobile Access Software Blade, but certificate authentication for VPN is not supported

Supported
Check Point VPN Plugin for Windows 8.1 Windows 8.1 R71.50 and above R75.40 and above (includes R75.40VS) Mobile Access license is required. On IPSO, Windows and VSX gateways there is no need to turn on Mobile Access in SmartDashboard. Supported
Mobile Access Portal

Any

R71 and above R75 and above SecurePlatform/Gaia only Supported
Legacy Clients
Secure Client / SecuRemote NGX R60 HFA3

Windows

R71 and above

SG80 R71 and above

R75 and above R65 and above Supported
Endpoint Connect R73 Windows

R71 and above

SG80 R71 and above

R75 and above VSX R67 and above  
Endpoint Security R73 and above Windows

R71 and above

SG80 R71 and above

R75 and above VSX R67 and above  

 

VPN Client Version and supported Gateway Version (R65, R70, VSX R65 and EDGE)

Note: R65, R70 and R71 are "End of Support".

VPN Client Version and supported Gateway Version
Client Name + Version Client OS platform R65 R70 VSX R65 EDGE Remarks
Endpoint Security E80-E80.30 Windows R65.40 and above R70.20 and above   8.2.33  
Endpoint Security E80.40 and above Windows R65.70 + HF (sk61286) R70.40 + HF (sk61286)

R70.50 and above (Including Secondary Connect for E75.20/E80.40 and above).

  8.2.33

8.2.48 - for E75.20/E80.40 and above

 
Endpoint Security VPN R75 / E75.10 and above Windows R65.70 + HF (sk61286) R70.40 + HF (sk61286)

R70.50 and above (Including Secondary Connect for E75.20 and above).

  8.2.33

8.2.48 - for E75.20 and above

 
Check Point Mobile for Windows E75.10 and above Windows R65.70 + HF (sk61286) R70.40 + HF (sk61286)

R70.50 and above (Including Secondary Connect for E75.20 and above).

  8.2.33

8.2.48 - for E75.20 and above

Mobile Access license is required. On IPSO and Windows gateways there is no need to turn on Mobile Access in SmartDashboard.
SecuRemote E75.10 and above Windows R65.70 + HF (sk61286) R70.40 + HF (sk61286)

R70.50 and above (Including Secondary Connect for E75.20 and above).

     
Endpoint Security E80.40 and above Mac OS X R65.70 + HF (sk61286) R70.40 + HF (sk61286)   8.2.33  
Endpoint Security VPN E75 and above Mac OS X R65.70 + HF (sk61286) R70.40 + HF (sk61286)   8.2.33  
SSL Network Extender for VPN-1 Portal Windows

Linux

Mac OS

R65 and above R70 and above R65 and above    
Check Point GO R75 and above Windows   R70.20 and above      
Legacy Clients
Secure Client / SecuRemote NGX R60 HFA3 Windows R65 and above R70 and above R65 and above Supported  
Endpoint Connect R73 Windows R65.40 and above R70.20 and above   8.2.33  
Endpoint Security R73 and above Windows R65.40 and above R70.20 and above   8.2.33  

 

Related SKs


Applies To:
  • This SK replaces sk79361 and sk36681 (information was integrated).
Give us Feedback
Rate this document
[1=Worst,5=Best]
Additional comments...(Max 2000 characters allowed)
Characters left: 2000