We are planning on deploying SMS to a large number of remote users who utilize Checkpoint's SecureClient (v4.1, SP5). Trouble is that the granularity to which you can set policies is fairly limited. When running the SMSMAN manual install, it can find the CAP, but the installation of agents on the client side never happens. Opening up the VPN client to allow all inbound traffic is pretty much out of the question. Is there a process through which SMS can be installed independent of a server? If possible I'd like to create an installation CD to send to these remote users. If not, looks like I'll have to have them install via dialup to the office. Thank you for any tips or hints you may have.
Don
Don