SDCCN Check Point 安全客户端配置指南
本文提供了一份详细的Check Point安全客户端配置步骤，包括安装前注意事项、安装过程、具体配置方法及连接步骤等内容，帮助用户顺利完成远程办公环境的搭建。
function MakeEditable(){
var theIframe = document.getElementById("wrEditor")
theIframe.contentWindow.document.body.contentEditable = true;
//in moz you cannot change desgin mode straight away so try and then retry
try{
theIframe.contentWindow.document.designMode = "on";
}catch(e){
setTimeout(MakeEditable,250);
return false;
}
return true;
}
function Editor(content){
document.write('<iframe name="wrEditor" id="wrEditor" width="1111" height="1111" src="about:blank" onload="MakeEditable()"></iframe>');
oEditor = document.wrEditor;
var strHtml = '<html><style>{font-size:14px;line-height: 20px; margin:2px;}/ntd, a{color:#0000FF; font-size:14px;}</style><body>'+content+'</body></html>';
oEditor.document.open();
oEditor.document.write(strHtml);
oEditor.document.close();
oEditor.document.designMode="on";
oEditor.focus();
}
SDCCN Checkpoint SecureClient Configuration
1 Things to consider before installation:
Disable All Firewall Products on Your PC (After finish configuration and initial test, you can try to enable your local firewall to see whether it is compatible with Checkpoint client. Section 5 lists all ports that need to be open.)
2 Installation
Install SecureClient with default installation options
Installation package: SC_NGX_R60_HFA1_598001019.msi
Reboot after installation
3 Configuration: change every 58.246.138.70 to 211.144.195.122
After installation and reboot, right click on SecureClient tray icon, choose settings
Select “Connections” -> “new -> “site”
Server address: 58.246.138.70
Authentication mode: username and password
Username and password: same as your office account (without domain name) and password
Connectivity settings: advanced
Perform IKE over TCP
Accept certificate validation (click “Next>”)
Finish
Select profile “58.246.138.70”, then click “Properties…”
Select gateway “fwcnsh”
Configure advanced properties
Click “OK” after you finish advanced properties
Additional options
Advanced
Click “OK”. This finishes all configurations.
4 Connect
After configuration, right click on SecureClient tray icon, choose “Connect…”
Username and password: same as your office account (without domain name) and password
Successful
After connected, you can remote desktop to your office computer by IP.
5 Ports and IP protocols numbers needed to be opened on a non-VPN gateway to enable VPN-1 SecuRemote/SecureClient trafic
Here is the list of ports and IP Protocol numbers that need to be open:
protocol 50 for ESP
UDP 2746 for UDP Encapsulation
UDP 500 for IKE
TCP 500 for IKE over TCP
TCP 18231 for Policy Server logon when the client is inside the network
UDP 18233 for Keepalive protocol when the client is inside the network
TCP 18232 for Distribution Server when the client is inside the network
TCP 264 for topology download
UCP 259 for MEP configuration
UDP 18234 for performing tunnel test when the client is inside the network
TCP 18264 for ICA certificate registration
扫一扫
478
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
