good method for authentication

[vvcat]

hi all,

my office and my warehouse are on different location, each site have checkpoint NGX firewall, usually, user can run secure client on home PC to logon vpn to access office server or warehouse server from home, but they need logon both firewall every time, what is the best method to reduce this effort. can we use LDAP or centralize tools or servers to accomplish this way.

[mcnallym]

Do the two sites have a VPN between the two. Also you said SecureClient so I presume you have the SecureClient License for this.

If they do then set the Remote Access Domain on the main office to include the encryption domain of the warehouse firewall.

Set the normal Encryption Domain of the main gateway to be the networks behind the gateway and the Office Mode range.

This way you can VPN to the main office gateway, authenticate once there, and then when you access the warehouse resources it routes across the site-to-site VPN to do this rather than building a seperate tunnel.

The downside is obviously more load in and out of the main office ISP link.