topic Re: Configuration for macOS in Endpoint

Configuration for macOS

sjlo — Wed, 06 Jan 2021 15:23:16 GMT

Hi,

We're deploying the Endpoint VPN client to our Macs, and we want to predefine some settings.

1. Gateway, so users don't have to manually run the Site Wizard

2. Disable "Always Connect" as default.

I'm able to edit the trac.defaults file and change 'neo_always_connected' to 'false', but this ends up "locking" the settings in the GUI so the end users can't change the setting at a later time, or even configure VPN Tunneling.

As for setting a default gateway, I'm at at loss. the trac.defaults file has so many options I don't know where to start.

So, I guess my question is; Are there any documentation on how to configure the client on macOS? E.g. a document explaining the options in trac.default?

Thanks!

Regards

Sjur

Re: Configuration for macOS

PhoneBoy — Thu, 07 Jan 2021 00:38:59 GMT

Some of these things need to be set on the gateway side (not client side).
Believe most/all of these also apply in trac.config as well: https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.SearchResultMainAction&eventSubmit_doGoviewsolutiondetails=&solutionid=sk75221

Re: Configuration for macOS

sjlo — Thu, 07 Jan 2021 08:25:08 GMT

Thanks, I suspected that.

I can see the Site Wizard populates the Trac.config file with the gateway details. I was thinking just deploying the same Trac.config file, populated with only the site details, across all devices. Would that cause any issues?

According to our Checkpoint guy, the Always-Connect option is set to "Configured on endpoint client" on the gateway. I'm able to set it to 'true' and 'false' in Trac.defaults and it reflects in the VPN client options, but I'm not able to change the setting in the GUI (VPN Options -> Properties -> Settings), the options are greyed out.

Re: Configuration for macOS

shadows112 — Thu, 15 Dec 2022 09:57:10 GMT

Hi sjlo,

in these days i'm trying to do the same thing as yours, that is, add 2 site to vpn checkpoint client, i managed to get a trac.config file i want. Now how can I create a custom pkg that automatically inserts the 2 sites when it is installed?

Re: Configuration for macOS

PhoneBoy — Tue, 06 Jun 2023 19:27:30 GMT

VPN Configuration Utility for Windows: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk122574&partition=Basic&product=Endpoint
For macOS, see: https://sc1.checkpoint.com/documents/HarmonyEndpoint/Harmony_Endpoint_Security_for_macOS_MDM_Deployment_Guide/Content/Topics-EP_Security_for_macOS_MDM_DG/MDM-Deployment-Guide.htm

Re: Configuration for macOS

shadows112 — Thu, 15 Dec 2022 15:36:53 GMT

That's for windows, right? I'm looking for macOs solution 😞

Re: Configuration for macOS

PhoneBoy — Thu, 15 Dec 2022 19:28:47 GMT

Please review the message again as I added a link to macOS specific instructions shortly after the initial post.

Re: Configuration for macOS

CeeToo — Tue, 06 Jun 2023 09:25:01 GMT

Hi there, can you check please what happened with the link for Mac OS? Unfortunately doesn't work anymore.

Re: Configuration for macOS

_Val_ — Tue, 06 Jun 2023 10:50:40 GMT

@CeeToo Please try this one: https://sc1.checkpoint.com/documents/HarmonyEndpoint/Harmony_Endpoint_Security_for_macOS_MDM_Deployment_Guide/Content/Topics-EP_Security_for_macOS_MDM_DG/MDM-Deployment-Guide.htm