topic SCV Checks for macOS Endpoint Computers in Endpoint

SCV Checks for macOS Endpoint Computers

Spartanec — Tue, 25 Nov 2025 09:05:36 GMT

Hi, colleagues!
I'm testing SCV Checks for macOS and trying to create a custom filter for Macs.
The link below provides three examples but I don't fully understand the syntax. For example, is it possible to create a check based on a hostname mask or the presence of a corporate certificate?
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_RemoteAccessVPN_AdminGuide/Topics-VPNRG/Secure-Configuration-Verification-Advanced.htm

Re: SCV Checks for macOS Endpoint Computers

ShemHunter — Wed, 26 Nov 2025 11:09:23 GMT

Hi Spartanec,

I found this post, it's probably very old, and perhaps @PhoneBoy will confirm this statement:

https://community.checkpoint.com/t5/Remote-Access-VPN/Host-Check-for-RAVPN/m-p/194157

"Endpoint Compliance is what you will need to use on the Mac.
This requires Harmony Endpoint licenses that include Remote Access or a CPEP-ACCESS SKU."

Re: SCV Checks for macOS Endpoint Computers

Spartanec — Wed, 26 Nov 2025 12:31:22 GMT

Hi, ShemHunter !
Thanks but it's old information. Now SCV works on MacOs too.

Re: SCV Checks for macOS Endpoint Computers

ShemHunter — Wed, 26 Nov 2025 15:17:46 GMT

https://support.checkpoint.com/results/sk/sk182226 - I found this article.

But also, if you need to verify the certificate, I would suggest using send the certificate to the device itself:

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_RemoteAccessVPN_AdminGuide/Topics-VPNRG/Machine-Certificate.htm?tocpath=_____13

Re: SCV Checks for macOS Endpoint Computers

the_rock — Thu, 27 Nov 2025 19:23:58 GMT

It does work, but I recall someone else on here trying it, but would not work as intended. Might be worth TAC case.