CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > SecureClient/SecuRemote
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-11-09
Junior Member
 
Join Date: 2006-10-11
Posts: 11
Rep Power: 0
mhicks has an average reputation (10+)
Default Force Office Mode?

Is it possible to force clients to use office mode?? I am trying to help a user convert his profile to office mode but I am having difficulties. I was hoping to be able to force all SecureClient users to use office mode from SmartDashboard.

Thanks for your help!
Reply With Quote
  #2 (permalink)  
Old 2007-11-09
Senior Member
 
Join Date: 2007-06-04
Posts: 1,072
Rep Power: 3
mcnallym has an average reputation (10+)
Default Re: Force Office Mode?

If the user is part of a usergroup that the gateway is configured to offer office mode too then the client will use Office Mode
Reply With Quote
  #3 (permalink)  
Old 2007-11-09
Senior Member
 
Join Date: 2006-01-25
Posts: 924
Rep Power: 3
melipla has an average reputation (10+)
Default Re: Force Office Mode?

Quote:
Originally Posted by mcnallym View Post
If the user is part of a usergroup that the gateway is configured to offer office mode too then the client will use Office Mode
We have enabled OM for all of our users and there are a handful that, for whatever reason don't get assigned an OM address. Usually reinstalling the client helps, sometimes reinstalling the OS does.

If you have more then one gateway in your Remote Access community then you will need to use Global Properties -> Remote Access -> Advanced -> Used first allocated Office Mode IP Address for all connections to the Gateways of the site. Otherwise access through secondary RA gateways won't use the original OM IP, instead it logs the access as coming from the clients LAN IP.

Quote:
Originally Posted by mhicks View Post
I was hoping to be able to force all SecureClient users to use office mode from SmartDashboard.
If you go here:
SmartDashboard -> Manage -> Remote Access -> Connection profiles
You can edit your current profiles and check the "Support Office Mode" option under the Advanced tab. This profile *should* get pushed down to the client after you push the policy to the firewall and the client updates its site/topology (assuming the client is set to auto-update topology, 'nother ball of wax).

If you aren't using connection profiles and all of your profiles are local to the client, then you must have the user edit his profile manually and enable the office mode option. If you are using MEP and letting the user pick which gateway to connect to, then a manual edit by the user is your only option for enabling OM--as such a scenario isn't viable by using SmartCenter managed profiles.

Last edited by melipla; 2007-11-09 at 09:16. Reason: Left off an answer to the orig question
Reply With Quote
  #4 (permalink)  
Old 2007-11-09
Junior Member
 
Join Date: 2006-10-11
Posts: 11
Rep Power: 0
mhicks has an average reputation (10+)
Default Re: Force Office Mode?

I too have "Allow Office Mode to All Users" selected and there are plenty of users that do not get an OM address. I was hoping to force these users to get an OM address but as I have been testing all day, OM is decided on the client.

The client was unable to edit his "default" profile. Even though the "default" profile under Manage -> Remote Access -> connection profiles already has "Support Office Mode" checked, the user is seeing that option grayed out in his client. He probably installed this client several years ago before we used office mode. What I am going to do is tell him to delete his site and recreate it, the client should download the new profile.


Thanks for your help!!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 15:03.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0