You can use a VSX deployment to support different Mobile Access scenarios. This feature is supported in R77.10 and above.

You can enable the Mobile Access Software Blade on VSX Virtual Systems. In a simple deployment with the Mobile Access cluster in the DMZ, two interfaces suffice a data interface leading to the organization and the internet, and a second interface for synchronization. Remote User making SSL connection through InternetĮach cluster member has three interfaces: one data interface leading to the organization, a second interface leading to the internet, and a third for synchronization. A cluster can be deployed in any of the deployments described above. If you have large numbers of concurrent remote access users and continuous, uninterrupted remote access is crucial to your organization, you may choose to have Mobile Access active on a cluster. The Security Gateway forwards requests to the internal servers. You must configure the Access Control Policy to allow traffic from the user to the Mobile Access server, where SSL termination, IPS and Anti-Virus inspection, authentication, and authorization take place. Remote users initiate an SSL connection to the Mobile Access Gateway. By deploying Mobile Access in the DMZ, the need to enable direct access from the Internet to the LAN is avoided. When a Mobile Access enabled Security Gateway is put in the DMZ, traffic initiated both from the Internet and from the LAN to Mobile Access is subject to firewall restrictions. Security Gateway with Mobile Access enabled It is also the least expensive and easiest to configure as it only requires one gateway machine for easy and secure remote access. The Security Gateway can be on the network perimeter. IPS and Anti-Virus can be active on all traffic as well. In the simplest Mobile Access deployment, one Mobile Access enabled Security Gateway inspects all traffic, including all Mobile Access traffic. Mobile Access can be deployed in a variety of ways depending on an organization's system architecture and preferences. Getting Started with Mobile Access In This Section:

Check point dhcp gateway vpn