Explanation
Office Mode enables a Security Gateway to assign internal IP addresses to SecureClient users. This IP address
will not be exposed to the public network, but is encapsulated inside the VPN tunnel between the client and
the Gateway. The IP to be used externally should be assigned to the client in the usual way by the Internet
Service provider used for the Internet connection. This mode allows a Security Administrator to control which
addresses are used by remote clients inside the local network and makes them part of the local network. The
mechanism is based on an IKE protocol extension through which the Security Gateway can send an internal IP
address to the client.

Accessto Web UI Gaiaadministration interface, initiate a connection from a browser to the default administration IP address: Logging in to the WebUI
Logging in
To log in to the WebUI:
https://<Gaia IP address>

Explanation/Reference:

Explanation/Reference:
Explanation:
Policy Layers and Sub-Policies
R80 introduces the concept of layers and sub-policies, allowing you to segment your policy according to your network segments or business units/functions. In addition, you can also assign granular privileges by layer or sub-policy to distribute workload and tasks to the most qualified administrators With layers, the rule base is organized into a set of security rules. These set of rules or layers, are

inspected in the order in which they are defined, allowing control over the rule base flow and the security functionalities that take precedence. If an "accept" action is performed across a layer, the inspection will continue to the next layer. For example, a compliance layer can be created to overlay across a cross-section of rules.
Sub-policies are sets of rules that are created for a specific network segment, branch office or business

unit, so if a rule is matched, inspection will continue through this subset of rules before it moves on to the next rule.
Sub-policies and layers can be managed by specific administrators, according to their permissions

profiles. This facilitates task delegation and workload distribution.
Reference: https://community.checkpoint.com/docs/DOC-1065