Check Point R77 Versions Mobile Access, Capsule Workspace, Capsule Connect, Capsule VPN Administration Guide

Below you will find brief information for Mobile Access R77 Versions, Capsule Workspace, Capsule Connect. This guide provides step-by-step instructions for configuring and managing Check Point's Mobile Access solution for R77 Gateways, allowing secure access to corporate resources from mobile devices. The guide covers essential topics including user authentication, authorization, endpoint security, and advanced features like single sign-on and two-factor authentication.

PDF
Document
Mobile Access R77 Versions Administration Guide | Manualzz

Advertisement

Advertisement

6 May 2015
Administration Guide
Mobile Access
R77 Versions
Classification: [Protected]
© 2015 Check Point Software Technologies Ltd.
All rights reserved. This product and related documentation are protected by copyright and distributed under
licensing restricting their use, copying, distribution, and decompilation. No part of this product or related
documentation may be reproduced in any form or by any means without prior written authorization of Check
Point. While every precaution has been taken in the preparation of this book, Check Point assumes no
responsibility for errors or omissions. This publication and features described herein are subject to change
without notice.
RESTRICTED RIGHTS LEGEND:
Use, duplication, or disclosure by the government is subject to restrictions as set forth in subparagraph
(c)(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013 and FAR
52.227-19.
TRADEMARKS:
Refer to the Copyright page (http://www.checkpoint.com/copyright.html) for a list of our trademarks.
Refer to the Third Party copyright notices (http://www.checkpoint.com/3rd_party_copyright.html) for a list of
relevant copyrights and third-party licenses.
Important Information
Latest Software
We recommend that you install the most recent software release to stay up-to-date with the latest functional
improvements, stability fixes, security enhancements and protection against new and evolving attacks.
Latest Documentation
The latest version of this document is at:
(http://supportcontent.checkpoint.com/documentation_download?ID=24851)
To learn more, visit the Check Point Support Center (http://supportcenter.checkpoint.com).
For more about this release, see the R77.30 home page
(http://supportcontent.checkpoint.com/solutions?id=sk104859).
Revision History
Date Description
19 April 2015 New for R77.30 Gateways:
Session Visibility and Management Utility (on page 167)
Kerberos Constrained Delegation (on page 70)
Certificate Attribute Forwarding (on page 72)
Configuring Link Translation Domains in SmartDashboard (on page 43)
Configuring a SAML Web Application (on page 41)
Updated:
Names of Check Point Mobile Apps throughout the document
Managing Capsule Workspace Settings (on page 103)
Push Notifications (on page 106)
10 July 2014 Corrected the note in SSL Network Extender Application Mode (on page 74)
Added note to Push Notifications (on page 106).
26 June 2014 New for R77.20 Gateways:
Configuring a TLS/SSL Version for an Application (on page 97)
Configuring SSO Name Format (on page 61)
SSO for Native Applications (on page 63)
Updated Push Notifications (on page 106)
01 June 2014 Added information to Capsule Workspace Mail Applications (on page 95)
Updated Kerberos Authentication Support (on page 67)
12 March 2014 Updated Push Notifications (on page 106)
05 March 2014 Updated Kerberos configuration ("Kerberos Authentication Support" on page 67)
Updated fwpush (on page 192)
Updated Anti-Virus and Anti-malware Blade (on page 172)
Updated Push Notifications (on page 106)
Date Description
06 February 2014 Updated MDM Cooperative Enforcement (on page 109) with link to sk98447 for
iOS 7 configuration with Check Point Apps
23 January 2014 Updated MDM Cooperative Enforcement (on page 109)
Corrected IPv6 support information in Remote Access Solution Comparison (on
page 20)
15 January 2014 New for R77.10 gateways:
 Added VSX support ("Deployments with VSX" on page 28)
 Added IPV6 support ("Mobile Access Applications" on page 11)
 Push Notifications (on page 106)
 Multiple Realms (on page 131)
 WebSockets (on page 58)
 MDM Cooperative Enforcement (on page 109)
 Remote Wipe (on page 102)
 fwpush (on page 192)
Updated Remote Access Solution Comparison (on page 20)
Corrected menu options in Portal Protection Settings (on page 157) and User
Experience Settings (on page 157)
01 August 2013 First release of this document
Feedback
Check Point is engaged in a continuous effort to improve its documentation.
Please help us by sending your comments
(mailto:[email protected]?subject=Feedback on Mobile Access R77 Versions
Administration Guide).
/

Advertisement

Key features

  • Secure access to corporate resources

  • Multi-factor authentication

  • Endpoint security

  • Mobile device management

  • Support for a variety of mobile devices

  • Comprehensive security features

  • Easy to use and manage

Frequently asked questions

This involves setting general properties like the application name, authorized locations, and adding the application to the endpoint computer. This guide outlines the necessary steps for configuring simple native applications.

Application Mode allows you to access specific applications and services, while Network Mode provides access to the entire network. This is explained in more detail within the SSL Network Extender section.

You need to configure a delegate user on the AD server and then configure support on the mobile access gateway. Detailed steps for this configuration are provided in the manual under 'Kerberos Constrained Delegation' section.

The manual lists various authentication methods, including username/password, certificate authentication, and two-factor authentication with DynamicID. This section provides guidance on configuring these methods.

Preparing document for printing…
0%