Problem solve Get help with specific problems with your technologies, process and projects.

Can I use IPsec within XP Pro to set up a VPN connection to Check Point VPN-1 server?

Can I use IPsec within WinXP Pro to set up a VPN connection to Check Point VPN-1 server? If this works, then I don't have to install the Check Point SecuRemote client in my Win XP Pro.
Theoretically, and I repeat, theoretically this is possible. I have heard claims from some who have accomplished just this, but said it was very difficult. The Windows 2000/XP Professional implementation of IPsec follows the standard. But remember, for an IPsec VPN to work, the configuration parameters on both sides must be the same in terms of strength of encryption keys, key refresh, authentication methods, etc.

I'm afraid I cannot help you further as I am not an Check Point VPN-1 expert. I can tell you, however, that it won't be as simple as firing up the XP VPN client and pointing it at the VPN-1 server. You will have to examine the requirements of the connection to see if you can set the Windows XP the same. You should realize however, that the Windows XP IPsec VPN client automatically uses L2TP for the tunnel -- there is no configurable IPsec policy present. You can, however, create one and possibly match the Checkpoint requirements.

Sounds like a lot of testing will be in order here, and you may want to weigh the benefits of using the Checkpoint client and having a solution up and running quickly against the benefit of doing without it.

This was last published in August 2002

Dig Deeper on Microsoft Windows XP Pro

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.