Can I use IPsec within XP Pro to set up a VPN connection to Check Point VPN-1 server?

Can I use IPsec within WinXP Pro to set up a VPN connection to Check Point VPN-1 server? If this works, then I don't have to install the Check Point SecuRemote client in my Win XP Pro.
Theoretically, and I repeat, theoretically this is possible. I have heard claims from some who have accomplished just this, but said it was very difficult. The Windows 2000/XP Professional implementation of IPsec follows the standard. But remember, for an IPsec VPN to work, the configuration parameters on both sides must be the same in terms of strength of encryption keys, key refresh, authentication methods, etc.

I'm afraid I cannot help you further as I am not an Check Point VPN-1 expert. I can tell you, however, that it won't be as simple as firing up the XP VPN client and pointing it at the VPN-1 server. You will have to examine the requirements of the connection to see if you can set the Windows XP the same. You should realize however, that the Windows XP IPsec VPN client automatically uses L2TP for the tunnel -- there is no configurable IPsec policy present. You can, however, create one and possibly match the Checkpoint requirements.

Sounds like a lot of testing will be in order here, and you may want to weigh the benefits of using the Checkpoint client and having a solution up and running quickly against the benefit of doing without it.

This was first published in August 2002

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.
    Back to top