Overview

You can configure your ZoneAlarm router as a Remote Access VPN Server. A Remote Access VPN (virtual private network) Server allows you to connect to your home or home office network from a remote location, while securing the traffic with data encryption and strong authentication.

The ZoneAlarm VPN Server accepts connections from the following sources:

Devices installed with Check Point SecureClient/SecuRemote VPN Client software, or from other Check Point security appliances which include a built-in SecuRemote/SecureClient VPN Client.

Note: Only SecureClient can connect to the VPN Server, not SecuRemote.
Devices installed with Check Point EndPoint Connect VPN Client. EndPoint Connect provides mobile users with seamless connectivity to corporate resources, by encrypting and authenticating data transmitted during secure remote access sessions.

ZoneAlarm allows a single VPN user to connect. If you need to allow VPN remote access to multiple users, consider purchasing a Check Point Safe@Office gateway.

Linked Diagram Template

Remote Access VPN

Note: A locally managed Remote Access VPN Server must have a static IP address. If you need a Remote Access VPN Server with a dynamic IP address, you must use SofaWare Security Management Portal (SMP) management.

Note: SecureClient/SecuRemote supports split tunneling, which means that VPN Clients can connect directly to the Internet, while traffic to and from VPN sites passes through the VPN Server.

Note: This chapter explains how to define a VPN locally. However, if your router is centrally managed by a Service Center, then the Service Center can automatically deploy VPN configuration for your router.