topic Re: SNX is not showing in Firewall and Security Management

SNX is not showing

LM-Rafael — Sat, 27 Apr 2024 22:49:39 GMT

Hi,

I have a user who wants to connect via VPN using Linux.

I have already read the article.
https://community.checkpoint.com/t5/Security-Gateways/VPN-client-for-Linux/m-p/118830#M16828
Is there anything more up-to-date here? I thought it would be best if the user used Linux's own VPN client. That should work, right?

SNX is not displayed when I log in with the user in the web interface. What is the reason for this?

VPN IP pool: 192.168.101.0/24
Customer network: 192.168.100.0/24
VPN client: ???
Split tunneling: Should be deactivated

What do I have to do to make this work? I have already tested a few things and all without success.

Please send me corresponding instructions or articles, links.

Best regards

Rafael

Re: SNX is not showing

PhoneBoy — Mon, 29 Apr 2024 20:53:52 GMT

SNX generally requires Mobile Access Blade to be deployed to end users.
The web interface you speak of for SNX requires Internet Explorer and Java Plugins (all of which are deprecated) and must be deployed via Mobile Access Blade.

If you want a "roll your own client" situation, use StrongSWAN, which we support since R81: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_RemoteAccessVPN_AdminGuide/Content/Topics-VPNRG/strongSwan-Client-Support.htm

Re: SNX is not showing

LM-Rafael — Mon, 29 Apr 2024 21:05:51 GMT

Hi,

I have seen these instructions several times and they don't fit me at all.

Neither the config files nor folders exist.

I will continue to work on the VPN topic here 😅.

Thanks

Rafael

Re: SNX is not showing

Lesley — Tue, 30 Apr 2024 07:22:05 GMT

SNX + Linux is supported as stated in: https://support.checkpoint.com/results/sk/sk166032

38. Linux VPN client - it is supported?

Check Point supports SNX for Linux operating systems. Support for Linux strongSwan Linux client is part of a recent development as documented in sk165014. Contact your local Check Point office for further information.

Here you can find the required software and supported platforms:

https://support.checkpoint.com/results/sk/sk119772

Here the SNX admin guide that you can use as a reference:

https://sc1.checkpoint.com/documents/SSL_Network_Extender_AdminGuide/Content/Search.htm?q=linux

Here some SK's you can use for troubleshooting:

https://support.checkpoint.com/results/sk/sk153032

https://support.checkpoint.com/results/sk/sk180837

https://support.checkpoint.com/results/sk/sk108184

https://support.checkpoint.com/results/sk/sk180750

Re: SNX is not showing

PhoneBoy — Tue, 30 Apr 2024 16:36:07 GMT

Is it supported on Linux? Yes.
However, without Mobile Access Blade on the gateway there is no supported way to invoke SNX on Linux.
See: https://support.checkpoint.com/results/sk/sk180750

Which leaves StrongSWAN or a L2TP over IPsec client as the only options.