We have "working out of the box" product where the CASQUE host is built into a Radius Server and uses Checkpoints SAA API to allow CASQUE to be embedded as part of the Firewall.

We now have a secure encrypted channel between the users workstation and the internet server, we have strongly authenticated the user by two factor CASQUE challenge….You can expose your network for remote access by designated users.