
Imagine telling your CFO that you cannot expedite a business opportunity because new customer B has the same IP address range as existing customer A. This allows you to have multiple clients using the same private IP ranges within their respective networks. Why would I want to deploy another firewall directly on the client?"This question can be answered by another feature offered in SecureClient that is not an option in SecuRemote: Office Mode, which allows you to virtually establish a new network connection on the client machine and specify all the IP settings that are assigned to this adapter. Some of you might say "okay, that’s fine if my client is directly connected to the Internet, but my client is sitting behind an already fully functional firewall or NAT device. Leaving the money issues aside, though, one of the main differences between the two products is the inclusion/lack of a personal firewall in one versus the other.The SecureClient product has a fully functional firewall built into the product.You can actually write rules and push them to your clients to allow/disallow them from performing various IP-related activities. As of this writing, the prices for SecureClient range from $25 to $92 per seat of SecureClient that you deploy depending on how many licenses you buy. On the other hand, SecureClient will cost you to deploy. SecuRemote is the poor man’s VPN solution, although FW1 does not come by default with a license for SecuRemote the license is free for using it.To obtain a SecuRemote license all one needs to do is log into your Check Point User Center and download a license for it. The first difference with SecuRemote and SecureClient that comes to mind is money. Overall, the new features in SecuRemote and SecureClient bring even tighter control, security, and flexibility to client VPN deployment. In addition, NG provides the capability to perform a clientless VPN.

Other options that NG provides also bear review, as Check Point has included the capability to terminate L2TP tunnels on the Check Point box.

SmartDashboard adds new functionality with bidirectional rules to the SecureClient system, allowing applications to open connections to client VPN hosts through the existing encrypted tunnels. SecuRemote and SecureClient can also utilize AES-128 and AES-256 encryption. Some of these include using split DNS, encrypting internal traffic, and a number of other options. There are myriad options for the configuration and deployment of the NG client VPN. We reintroduce the differences between SecuRemote and SecureClient, and once we cover the differences, we discuss some of the advanced deployment options for both clients.

Check Point SecuRemote and SecureClient are excellent tools provided by Check Point for remote VPN connectivity.
