topic Re: allow connections only users with EC and policy from SmartEndpoint. in Endpoint

allow connections only users with EC and policy from SmartEndpoint.

Andrey_Ganichev — Mon, 31 May 2021 08:41:35 GMT

Hello,

How I can restirct users with Endpoint client (remote acccess) only and allow only users with Endpoint client with policy from SmartEndpoint?
Should I try setting up SVC on the VPN GW R80.20?

Andrey

Re: allow connections only users with EC and policy from SmartEndpoint.

G_W_Albrecht — Mon, 31 May 2021 09:41:35 GMT

Can you explain - maybe using examples of which kind of behaviour you want and which not - what restrictions you speak of ?

Re: allow connections only users with EC and policy from SmartEndpoint.

Andrey_Ganichev — Mon, 31 May 2021 09:54:29 GMT

Currently all users connect to R80.20 Gateway using Endpoint clients (Windows and MacOS). We plan to use Harmony SmartEndpoint server for deploy policy (Firewall, compliance, anti-malware and etc.) for remote users. So we would like to restrict old users with Endoint client without Policy connect to GW and allow only users with clients deployed from exported package from SmartEndpoint server.

Re: allow connections only users with EC and policy from SmartEndpoint.

G_W_Albrecht — Mon, 31 May 2021 12:09:19 GMT

If you use Enterprise Security VPN clients with FW (Desktop policy defined in Dashboard), there is a simple solution: After a certain date, change the Inbound and Outbound Rules in Dashboard to Drop instead of Encrypt 8)

On next connection, these clients will load the new policy and be unable to connect anymore ! EPS clients will not use this policy.

Re: allow connections only users with EC and policy from SmartEndpoint.

Andrey_Ganichev — Mon, 31 May 2021 12:24:48 GMT

Thank you for solution.
Unfortunately we don't use Desktop Policy defined in Dashboard, only remote access vpn.

Re: allow connections only users with EC and policy from SmartEndpoint.

G_W_Albrecht — Mon, 31 May 2021 13:06:45 GMT

Then change to use Desktop Policy defined in Dashboard - that is easy !

Re: allow connections only users with EC and policy from SmartEndpoint.

Andrey_Ganichev — Mon, 31 May 2021 13:14:38 GMT

Thank you. I will check the solution.

Re: allow connections only users with EC and policy from SmartEndpoint.

G_W_Albrecht — Mon, 31 May 2021 15:00:53 GMT

I think you are just using the pre-defined default Desktop Policy found in old Dashboard and do not realize that - it only tells the client to encrypt outgoing and decrypt ingoing packets, that is just the usual VPN client behaviour ! You can see that in old Dashboard.

Re: allow connections only users with EC and policy from SmartEndpoint.

G_W_Albrecht — Mon, 31 May 2021 14:59:52 GMT

Also see Remote Access VPN R81 Administration Guide p.82 for details and the note:

If you use Endpoint Security VPN as part of the Check Point Endpoint Security Suite, you can configure if your client Firewall comes from Desktop Security in SmartDashboard or SmartEndpoint.