Port Forwarding for SecureClient

[lowfell]

I support a company who have many remote access users who come in via secureClient. Now these endusers all have router made by different vendors &n some of them have issues using SecureClient with their routers, i beleive this is down to portforwading, so to cut to the chase, is there a generic list of ports that should be forwarded on their Routers.
Thanks in advance!

[mikediu]

I am a remote user and also have a router problem. I have installed NGX R60 HFA-01 "Customers: NGX Auto-Installation Compact View" which works fine in an offsite location which uses a BT USB modem without a router. However, at my office location I have to use the company's router and when I try to connect I get "gateway not responding". I have even tried at home using my own basic router and have the same problem. I have also tried Visitor Mode but get an error message saying that this is not supported on the gateway. Are there some generic settings required to set up a router for use with CheckPoint SecureClient?

Thanks
Mike

[chillyjim]

For home users there are two things that really help

1. Office Mode -- Assigns a virtual internal IP address to the VPN adaptor
2. Visitor Mode -- Gets around a lot of filtering issues as well as MTU issues with pptp and ppoe connections (very common on DSL).

The terminating gateway mush be configured to support both of these for it to have any effect.

[mikediu]

I have Office Mode set in the SecureClient options but Visitor mode is not allowed by the gateway. Users in other offices in Europe can connect through a router but for some reason I cannot. Does anyone know what basic options need to be set on the router to get it to work with CP SecureClient?

[tmutchler]

Instead of port forwarding, try disabling connectivity enhancements for the profile you're using.