topic Re: Deploy Checkpoint VPN with preconfigured sites on MACOS in Endpoint

Deploy Checkpoint VPN with preconfigured sites on MACOS

shadows112 — Mon, 05 Dec 2022 09:30:29 GMT

Hi all,

as the title suggests, I would like to deploy, using intune, checkpoint vpn with 2 preconfigured sites, so that the user doesn't have to enter them by hand. Is there any way to do this? Has anyone had experience with this before?

Thanks everyone for the replies.

Re: Deploy Checkpoint VPN with preconfigured sites on MACOS

PhoneBoy — Mon, 05 Dec 2022 15:35:30 GMT

I presume it works similar to how it does on Windows.
Namely you need to prepare a trac.config file with the relevant settings and include it in the installer package you distribute to your users.

And, in fact, we have a specific guide for integrating with Intune: https://sc1.checkpoint.com/documents/HarmonyEndpoint/Harmony_Endpoint_Security_for_macOS_MDM_Deployment_Guide/Content/Topics-EP_Security_for_macOS_MDM_DG/Device-Management-Deployments.htm?tocpath=Device%20Management%20Deployments%7C_____3

Re: Deploy Checkpoint VPN with preconfigured sites on MACOS

shadows112 — Tue, 06 Dec 2022 11:48:43 GMT

hi, first of all thanks for the reply. Excuse me but I'm totally new in this environment, could you tell me a little more about the steps?

Re: Deploy Checkpoint VPN with preconfigured sites on MACOS

PhoneBoy — Tue, 06 Dec 2022 15:33:41 GMT

At a high level, it’s something like:

Unpack the .pkg file (believe its a zip file)
Replace the trac.config file inside with one that has the desired settings
Repack the zip file

I personally haven’t done it, though, so might be missing a step.
In any case, the TAC should be able to assist with this.

Re: Deploy Checkpoint VPN with preconfigured sites on MACOS

shadows112 — Tue, 06 Dec 2022 16:31:30 GMT

I've tried to download the pkg from checkpoint site but if I try to unpack it there's no trac.config file inside, in the attachment i've upload the content of folder. Sorry but TAC stands for?

Re: Deploy Checkpoint VPN with preconfigured sites on MACOS

PhoneBoy — Tue, 06 Dec 2022 17:39:28 GMT

Technical Assistance Center: https://help.checkpoint.com

However, it looks like the process for preconfiguration on MacOS is a bit different than I remember it.
See: https://sc1.checkpoint.com/documents/HarmonyEndpoint/Harmony_Endpoint_Security_for_macOS_MDM_Deployment_Guide/Content/Topics-EP_Security_for_macOS_MDM_DG/Device-Management-Deployments.htm?tocpath=Device%20Management%20Deployments%7C_____0#cpConfigTool_(E86.20_and_higher_%E2%80%93_EA_status)

Re: Deploy Checkpoint VPN with preconfigured sites on MACOS

shadows112 — Fri, 09 Dec 2022 14:48:26 GMT

Ok I managed to create a trac.config containing the 2 sites, at this point how can I create a pkg that installs the vpn with this configuration file?