topic Re: macOS HEP - block non compliant machines from RA VPN in Endpoint

macOS HEP - block non compliant machines from RA VPN

aka — Wed, 18 Feb 2026 18:24:22 GMT

Hi everyone. I need to block connection to the RA VPN on macOS when the device status is "not compliant". With a standalone remote access client, I know that configuring SCV would help, but we are using harmony endpoint client, which doesn't support SCV.

Is there any native way to block VPN access when the harmony agent reports with non compliance status?

Re: macOS HEP - block non compliant machines from RA VPN

PhoneBoy — Thu, 19 Feb 2026 16:31:06 GMT

I believe what you're looking for is "Cooperative Enforcement."
This is enabled/configured in the relevant gateway object under Other > Cooperative Enforcement.
https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_LoggingAndMonitoring_AdminGuide/Content/Topics-LMG/Cooperative-Enforcement-Solution.htm