The PhoneBoy Blog


Simplifying Telecom, Mobile Phones, Gadgets, and More!

FireWall-1 FAQ: Secure Client on Windows XP

Please note: This content was from when I was operating my FireWall-1 FAQ site, which I stopped operating in August 2005. For some reason people still have links to this stuff on the Internet that people are still clicking on.


I am making this information available again AS IS. Given how old this information is, it is likely wildly inaccurate. I have no plans to update this information.


If you're still running versions of Check Point VPN-1/FireWall-1 where this information is still relevant to you, do yourself a favor and upgrade to a more recent release. If you happen to be running a current release and the information is useful, it's by happenstance :)


Build 4199 and later of Secure Client support Windows XP. For Secure Client NG, the Feature Pack 1 release or later is required. Earlier versions may work with the Windows 2000 installer, though it is not guaranteed.

Some hints:

  • You will need to disable Windows XP's Personal Firewall option.
  • It is important to use the latest build of SecuRemote, preferably from the NG family rather than the 4.1 family. The NG build is backwards compatible with the 4.1 server and appears to cause fewer problems with Windows XP.
  • If traffic going through an Ethernet adapter doesn't appear to be passing through SecuRemote properly, follow these steps:
    1. Open the network properties page for the ethernet adapter in question.
    2. Deselect the SecuRemote option.
    3. Reboot.
    4. Open the network properties page for the adapter again.
    5. Select the SecuRemote option. Windows XP will complain that the driver isn't signed, but continue.

C-List #Cybersecurity Celebrity, Podcaster, #noagenda Producer, Frequenter of shiny metal tubes, Expressor of personal opinions, and of course, a coffee achiever.