Hot Spot/Hotel Registration

[generalit]

Hi,

I'm currently using 1 NGX R60 (build 418) gateway. My secureClient users are using NG with AI-R56 (Build 619).

Due to our security policy, all secureclient users need to connect to the VPN if they require web traffic access when outside of the corporate network.

Because of this, when my sales reps are staying at a hotel and are required to register to the hotels network via IE, they are unable to because to make an IE connection, they require to connect to the VPN. As they are unable to make a connnection to the hotel network, they are unable to connect to the NGX gateway.

I have now configured the option for hot spot/hotel registration on the NGX gateway, within the Global Policy section. Please see attached for my configuration of the hot spot/hotel registration.

The issue I have at the moment is, this global change on the NGX gateway has not replicated to the userc.C file (c:\program files\checkpoint\secureremote\database).

I thought if i made a global change, this change would then replicate back to the userc.C file when they make a successfulconnection?

If that is not the case, when would the users see this change in the userc.C file?

[stefan73er]

hi,

what have you done on the client? I believe that the client only have done a policy update within the loginprocess. To replicate the Hotspot Registration changes to the client a siteupdate is needed.

cheers
Stefan

[generalit]

Hi,

Thanks for your reply.

On the client side, i have established a connection to the vpn, Then i opened the SC settings page, clicked on site name, then selected option and update site.

I have stilled notice the change has not replicated. The option hotspot :enabled (false) is still displayed.

[generalit]

Hi Guys,

Any thoughts on a solution?

[stefan73er]

Hi,

have you tried the same with a newer client (R60). Does the same problem happen with this version? I remember that the r56 client belongs to the r55 firewall and bring some new features with it. But the R55 doesn´t habe the Hotspot configuration option in the global properties like R60. Could be that the replication only works with the R60. But i´m not sure if so .... but give it a try.

cheers,
stefan

[generalit]

Hi,

I will try the new R60 client. But my thoughts are the R56 client within the userc.C file has the hot spot option available, so i would of thought it would be compatiblewith the NGX gateway.

[mcnallym]

I believe that with the R56 client then the change to allow the client to use Hotspot registration need to be made manually. The changes are listed in a Check Point knowledgebase article. sk26967

:hotspot (
:enabled (true)

you need to set to be true. This then provides the option for register to hotspot on the secureclient icon in the system tray when you right click it.

You can indeed use R56 client with NGX gateway, I just don't think you necessarily get all of the NGX feature available, so is worth upgrading to NGX client to get the full NGX functionality.