Ask the Expert

Can I use IPsec within XP Pro to set up a VPN connection to Check Point VPN-1 server?

Can I use IPsec within WinXP Pro to set up a VPN connection to Check Point VPN-1 server? If this works, then I don't have to install the Check Point SecuRemote client in my Win XP Pro.
Theoretically, and I repeat, theoretically this is possible. I have heard claims from some who have accomplished just this, but said it was very difficult. The Windows 2000/XP Professional implementation of IPsec follows the standard. But remember, for an IPsec VPN to work, the configuration parameters on both sides must be the same in terms of strength of encryption keys, key refresh, authentication methods, etc.

I'm afraid I cannot help you further as I am not an Check Point VPN-1 expert. I can tell you, however, that it won't be as simple as firing up the XP VPN client and pointing it at the VPN-1 server. You will have to examine the requirements of the connection to see if you can set the Windows XP the same. You should realize however, that the Windows XP IPsec VPN client automatically uses L2TP for the tunnel -- there is no configurable IPsec policy present. You can, however, create one and possibly match the Checkpoint requirements.

Sounds like a lot of testing will be in order here, and you may want to weigh the benefits of using the Checkpoint client and having a solution up and running quickly against the benefit of doing without it.

This was first published in August 2002

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: