topic Re: SandBlast Agent Installation with Endpoint Connect VPN in Endpoint

SandBlast Agent Installation with Endpoint Connect VPN

MikeB — Tue, 08 Oct 2019 19:20:56 GMT

Hi CheckMates,

I have a customer that has SandBlast Agent - Full Package (AB + FRNC + TE + TEX) with a particular case depoying this agent in a few users.

This few users had the Check Point VPN client already installed (to connect to a third party Checkpoint Gw) and when we try to deploy and install the Endpoint Security package, the following error appears:

we solved this error previously in another client by enabling the "Endpoint Connect VPN" blade in the deployment tab of SmartEndpoint (as mentioned in the error), but in this particular case the icon is gray (disabled) and can't enable it (maybe some license is missing??)

Is there a way to solve this issue? I need to install SBA and also keep the VPN agent but don't understand why these Check Point products are incompatible with each other

Re: SandBlast Agent Installation with Endpoint Connect VPN

PhoneBoy — Tue, 08 Oct 2019 22:47:33 GMT

The VPN (only) clients are basically the full Endpoint client without all the other blades.
If you need SBA + the VPN client on the same machine, they need to be deployed as a single bundle from SmartEndpoint.
The VPN client can still be used to connect to third parties in this situation.

The only thing I can think of is your client doesn't have a license for Remote Access.
I believe current SBA bundles include it, but older ones may not have.

Re: SandBlast Agent Installation with Endpoint Connect VPN

MikeB — Thu, 10 Oct 2019 15:02:49 GMT

Thank you @PhoneBoy for your answer. I was thinking it was a license issue as well.

Considering that SBA is a subscription service, it should also be possible to update new bundles (with new blades included) also to customers with active services and not only the new ones.

Re: SandBlast Agent Installation with Endpoint Connect VPN

RS_Daniel — Fri, 12 Mar 2021 15:58:38 GMT

Hello @PhoneBoy

I am facing a similar situation with a customer with many hundreds of standalone vpn clients (endpoint security vpn) already installed, and with many differente versions, some of them very old. Now we are planning and testing the deployment of Harmony endpoint (E84.50) in these machines, but having problems with old vpn client. Do you know if it is supported to install Harmony Endpoint above standalone vpn clients? and the correct procedure we should follow in these cases? Thanks in advance.

Regards

Re: SandBlast Agent Installation with Endpoint Connect VPN

PhoneBoy — Fri, 12 Mar 2021 20:20:26 GMT

First of all, if you’re dealing with old VPN clients, this may be required to upgrade/uninstall: https://www.checkpoint.com/fix
Not sure you can just install over older VPN client even with this fix.
It would probably be safer to uninstall the old client first (after applying the above fix).

Re: SandBlast Agent Installation with Endpoint Connect VPN

the_rock — Fri, 12 Mar 2021 20:39:31 GMT

Definitely seems like license issue...

Re: SandBlast Agent Installation with Endpoint Connect VPN

the_rock — Fri, 12 Mar 2021 20:48:08 GMT

I checked this same screeenshot on 2 customers' environments and that option is definitely available, but they do have full license for sandblast, so I would logically say it may sound like the problem you have. I would personally check with License team, just to be positive. As far as how to get around it, I have no clue : (. Maybe someone with way better knowledge of this subject can chime in.

Re: SandBlast Agent Installation with Endpoint Connect VPN

MikeB — Fri, 12 Mar 2021 23:40:37 GMT

yes!..the problem was definitely one of licensing. Thank you!