Check Point Remote Access VPN (Quantum VPN)
Remote Secure Access

Overview:

Provide users with secure, seamless remote access to corporate networks and resources when traveling or working remotely. Privacy and integrity of sensitive information is ensured through multi-factor authentication, endpoint system compliance scanning and encryption of all transmitted data.

Accessing corporate resources while away from the office are essential to the productivity of employees. However, remote locations are often not secure. Simple acts such as checking e-mail via a wireless internet connection in a coffee shop are enough to compromise user systems and corporate data. These leave corporations vulnerable to lawsuits, breach of data, and failure to comply with regulatory requirements.

Remote Access Products

Remote access is integrated into every Check Point network firewall. Configure client-to-site VPN or set up an SSL VPN Portal to connect from any browser.

Features:

Solution

Check Point Remote Access VPN provides users with secure, seamless access to corporate networks and resources when traveling or working remotely. Privacy and integrity of sensitive information is ensured through multi-factor authentication, endpoint system compliance scanning and encryption of all transmitted data.

Secure Access

• Full IPsec VPN connectivity for strong authentication and data integrity.
• Compliance checks verify that the client complies with the organization's security policy. Non-compliant client connections to the encryption domain will be blocked.

Multi-Authentication Support

• Comprehensive authentication options include:
  • Username/Password (including cached passwords)
  • SecurID
  • RADIUS Challenge/Response
  • CAPI software and hardware tokens
  • P12 certificates

Seamless Tunnel Establishment, Teardown and Roaming

• Ability to transparently establish a VPN tunnel upon demand when accessing corporate resources.
• Re-establishes connections when roaming between networks and automatically configures for the new session.
• Automatically tears down the VPN tunnel when the device is connected to the local corporate network.

Connect Options

• Hotspot detection, Office Mode IP, Split Tunneling, Hub Mode, automatic fallback from NAT-T to HTTPS

Compliance Scanning

Endpoint compliance verifies the security level of the endpoint, and reports back to the Security Gateway. The gateway can allow connectivity to specific network resources, based on compliance level.

Deployment Options

Install our endpoint E80.6x VPN client in one of three options, with or without our Endpoint Security suite.

1. Included in Endpoint Security Access Control Bundle for Windows and Apple macOS.
• Firewall
• Application Control (not available on macOS)
• Remote Access VPN
• Compliance (not available on macOS)
2. Standalone Check Point Mobile for Windows
• Remote Access VPN
• Compliance
3. Standalone SecuRemote
   • Remote Access VPN

Endpoint Data Security Solution

Remote Access VPN is one part of our endpoint data security solution, providing secure access to corporate resources when traveling or working remotely. With Full Disk Encryption we secure the entire drive. With Capsule Docs we enable organizations to seamlessly protect documents, ensuring access for authorized users only. Media Encryption and Port Protection secure removable media and enables restricting or blocking of physical ports.

Central Management

Remote Access VPN is centrally managed, enabling central policy administration, enforcement and logging from a single, user-friendly console. Centralized management offers unmatched leverage and control of security policies.

Specifications:

Specifications
Secure Access	Full IPsec VPN connectivity Compliance checks
Authentication Support	Username/Password (including cached passwords) SecurID RADIUS Challenge/Response CAPI software and hardware tokens P12 certificates
Seamless Tunnel Establishment, Teardown	Transparently establish a VPN tunnel upon demand Re-establishes connections when roaming Automatic tunnel tear down when on the corporate LAN
Connect Options	Hotspot detection, Office Mode IP, Split Tunneling, Hub Mode, automatic fallback from NAT-T to HTTPS
Remote Access Options
SSL VPN Portal	Mobile Access Web Portal SSL Network Extender for Mobile Access Blade Check Point Mobile for iOS and Android Capsule Workspace for iOS and Android
Layer 3 VPN Tunnel	Endpoint Security Remote Access VPN Check Point Mobile for Windows Capsule Connect for iOS and Android Check Point VPN Plugin for Windows 8.1 Check Point Capsule VPN for Windows 10

Documentation:

Download the Check Point Remote Access VPN Datasheet (PDF).