topic Re: VPN Site Endpoint in Endpoint

VPN Site Endpoint

Mattia_Marini — Tue, 20 Aug 2019 10:07:06 GMT

Hi All,

is possible to add a VPN Site configured in a client installed by Initial Client using Smart Endpoint R80.30 ?

I know that this is possibile using an exported packages, but i cannot do it using initial client.

Thanks

Re: VPN Site Endpoint

G_W_Albrecht — Tue, 20 Aug 2019 11:42:02 GMT

What do you mean when using Smart Endpoint R80.30 ? There is Mobile Access Web Portal, Check Point Mobile for Windows, Endpoint Security VPN client and Endpoint Security Suite with an Endpoint Security Server (e.g. R80.30) and Endpoint Security clients (e.g. E81.20).

If using an Endpoint Security Server with Endpoint Security clients, install packages must always be defined and exported from the Endpoint Security Server !

The Endpoint Security VPN client can be installed as-is and a site can be defined for VPN.

For further information, see sk67820: Check Point RemoteAccessSolutions.

Al flavors of clients are available here: sk117536 - Endpoint Security Homepage.

Re: VPN Site Endpoint

Mattia_Marini — Tue, 20 Aug 2019 12:11:25 GMT

Yes, i've Endpoint Security Server with Endpoint Security clients .
I've defined a VPN Client Settings in the Advanced Package Settings on Deployment's Tab but if i install a client using only the initial clients the vpn site will no be configured automatically.

Re: VPN Site Endpoint

Mattia_Marini — Tue, 20 Aug 2019 13:10:55 GMT

Re: VPN Site Endpoint

G_W_Albrecht — Tue, 20 Aug 2019 13:12:17 GMT

You have exported the configured EPS client from EPSS successfully ? Otherwise, you can not do any further configuration.

Re: VPN Site Endpoint

Mattia_Marini — Tue, 20 Aug 2019 13:12:28 GMT

If i exported the configured EPS client (full packages) it works; but if i export only the initial client it download and install the packages but not configure the VPN Site

Re: VPN Site Endpoint

G_W_Albrecht — Tue, 20 Aug 2019 13:29:56 GMT

Did you follow Endpoint Security Management Server Administration Guide R80.20 p.47ff ? If the VPN Blade is configured in the Software Deployment rules for these clients, rolling out the initial client for Automatic Deployment should be sufficient.

Of course, connection between EPSS and initial client must be working for successful deployment ! Looks like a TAC case to me...

Re: VPN Site Endpoint

Norbert_Bohusch — Thu, 10 Oct 2019 20:28:59 GMT

No, configuration is only in deployment package and the initial client is not related to such deployment package.

Unfortunately current the only way for initial clients is that after deployment with VPN client the site is created by a script using GPO or similar.

Would be great to add a feature to allow remote configuration of site after deployment!