If you have large numbers of concurrent remote access users and continuous, uninterrupted remote access is crucial to your organization, you may choose to have Mobile Access active on a cluster. Requests are then forwarded to the internal servers via the firewall. The firewall must be configured to allow traffic from the user to the Mobile Access server, where SSL termination, IPS and Anti-Virus inspection, authentication, and authorization take place. Remote users initiate an SSL connection to the Mobile Access Gateway. By deploying Mobile Access in the DMZ, the need to enable direct access from the Internet to the LAN is avoided. When a Mobile Access enabled Security Gateway is placed in the DMZ, traffic initiated both from the Internet and from the LAN to Mobile Access is subject to firewall restrictions. It is also the least expensive and easiest to configure as it only requires one gateway machine for easy and secure remote access. The Security Gateway can be on the network perimeter.

IPS and Anti-Virus can be active on all traffic as well. In the simplest Mobile Access deployment, one Mobile Access enabled Security Gateway inspects all traffic, including all Mobile Access traffic.

Mobile Access can be deployed in a variety of ways depending on an organization's system architecture and preferences. Getting Started with Mobile Access In This Section:

Download checkpoint smartdashboard r77