topic Re: Endpoint Security VPN, remotely create site in Endpoint

Endpoint Security VPN, remotely create site

Sergo89 — Tue, 14 Jan 2020 20:37:34 GMT

Hello,

do we have any way how to push a new VPN Site address to Endpoint Security clients (create it)? i know we can play with MSI file and trac.defaults, but endpoint client deployed on 500 computers already (we began from Endpoint and gateway should be next step).

Advanced Package settings in SmartEndpoint looks like change MSI file also.

And do we have any feature in SmartEndpoint for VPNs, because its part of client....

please advise.

thanks

Re: Endpoint Security VPN, remotely create site

G_W_Albrecht — Wed, 15 Jan 2020 12:06:56 GMT

I can not see if you talk about EPS VPN clients or full EPS Suite clients.

Re: Endpoint Security VPN, remotely create site

Yatiraj_Panchal — Wed, 15 Jan 2020 12:32:02 GMT

Hi,

I think there is no way to do it in Check Point from SmartConsole.

But, u can do it from remotely managed devices tools (Like: LanDesk)

Below the alternatives:

1. Just do it manually on one device which is admin device of that tool and then push to all the other devices which managed by that tool.

2: You can do it from Windows CMD as well few lines command is there (will share you in next post), but you have to run on each machine.

2nd one is little bit tough for you, but you can create SOP share with users

Thank You

Yatiraj

Re: Endpoint Security VPN, remotely create site

Sergo89 — Wed, 15 Jan 2020 16:07:39 GMT

G_W_Albrecht, i guess its Suite

Re: Endpoint Security VPN, remotely create site

Sergo89 — Wed, 15 Jan 2020 16:09:45 GMT

Thank you Yatiraj, i thought about that, looks like i have to replace conf files remotely... just one way

Re: Endpoint Security VPN, remotely create site

ISA_License_Adm — Tue, 11 Feb 2020 13:41:46 GMT

Hi,

Was the post shared on how remotely create a site via CMD?

Re: Endpoint Security VPN, remotely create site

alancw — Mon, 30 Mar 2020 23:26:27 GMT

Id be definitely interested in hearing a solution for this one, as I have the same issue at the moment.

Also does anyone know if its possible to define two sites in the packages for export from the R80.30 smartendpoint server, so that users have the option to connect into either site say if one was down?

Re: Endpoint Security VPN, remotely create site

_Val_ — Tue, 31 Mar 2020 07:14:02 GMT

Not two sites. You are looking for a single site in MEP configuration. It is well documented, actually.

Re: Endpoint Security VPN, remotely create site

alancw — Tue, 31 Mar 2020 07:57:43 GMT

No problem, is there any way of pushing out a second site to users? We have 500+ users, it would be some pain to have to manually add a second site to all the user machines.

Re: Endpoint Security VPN, remotely create site

_Val_ — Tue, 31 Mar 2020 09:45:49 GMT

Basically, in any Remote Access Admin Guide. Here is an example: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_RemoteAccessVPN_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/CP_R80.10_RemoteAccessVPN_AdminGuide/164758

Re: Endpoint Security VPN, remotely create site

MikeB — Fri, 03 Jul 2020 21:56:54 GMT

Did anyone find a solution or alternative to this? Thanks in advance.

Re: Endpoint Security VPN, remotely create site

_Val_ — Sun, 05 Jul 2020 17:18:30 GMT

Did you read the comments?

Re: Endpoint Security VPN, remotely create site

MikeB — Sun, 05 Jul 2020 17:53:40 GMT

Of course I did, including yours. The link you share shows "Not Found" message inside the Admin Guide and even though I'm looking, I couldn't find the example you mention.
On the other hand, I found a slightly more manageable alternative for changing or creating a VPN site that could be done remotely with the "Update Configuration Tool":

E80.72 and higher Remote Access Clients for Windows Administration Guide - http://downloads.checkpoint.com/dc/download.htm?ID=60345

I think Check Point could improve this feature to be able to do it directly from the SmartEndpoint or SmartConsole.

Re: Endpoint Security VPN, remotely create site

_Val_ — Mon, 06 Jul 2020 08:54:35 GMT

Apologies then.

The link I was posting should go to the "Configuring MEP" section of the doc. It is not working for me either, sorry about that.

Since the original question was about adding a secondary site, MEP is the best option. Config tool is to create MSI packages. This is indeed the way, but you need to push them around. Depending on the actual needs and desired, either way could work.