topic Re: CheckPointVPN.msi install string in Endpoint

CheckPointVPN.msi install string

NeilDavey — Tue, 02 May 2023 14:07:25 GMT

Afternoon

I am looking at installing E86.50_CheckPointVPN.msi and want to do this via SCCM.

On a manual install, I would select the 2nd option (Check Point Mobile).

I can't seem to find an install string to do this silently.

I found this post from 2018:

Changing the Standalone Remote Access Client flavo... - Check Point CheckMates

But I am not keen on this method as it doesn't seem to be supported by Check Point.

Is there a silent install string that can be used now?

Thanks

Re: CheckPointVPN.msi install string

G_W_Albrecht — Tue, 02 May 2023 14:33:00 GMT

See sk179668: Installing Harmony Endpoint with MSI through CLI

My post was about changing an installed client from e.g. with firewall to no firewall.

Re: CheckPointVPN.msi install string

NeilDavey — Wed, 03 May 2023 07:03:33 GMT

Thanks for this however, I am not sure how to define the install as "Check Point Mobile"

When I do an manual install and select it like this, the reg key is:

Looking at the link for Harmony, I have put together an install like this:

msiexec.exe /i C:\Source\E86.50_CheckPointVPN.msi /quiet

The install is silent and installs but the reg key is different from the manual install:

Am I missing something on how to select the Check Point Mobile on this silent install?

Re: CheckPointVPN.msi install string

G_W_Albrecht — Wed, 03 May 2023 07:16:39 GMT

Sorry - sk179668 is only for EPS, you are using Check Point Remote Access VPN Clients for Windows. Afaik there is no CLI install string available for these, so you have to set the reg key to use Check Point Mobile. See https://sc1.checkpoint.com/documents/RemoteAccessClients_forWindows_AdminGuide/Content/Topics-RA-VPN-for-Win/Installing-MSI-Package-with-CLI.htm

Re: CheckPointVPN.msi install string

NeilDavey — Wed, 03 May 2023 07:28:40 GMT

Thank you.

So no issues with doing the install as standard and then having the reg key as EndpointSecurity and then changing this to Mobile?

If this is the only way, then I will get this packaged up with SCCM

Re: CheckPointVPN.msi install string

G_W_Albrecht — Wed, 03 May 2023 09:19:04 GMT

That should be OK. The selection page only does set the reg key to the flavour choosen,the installation files are always the same. On startup the RA client reads the set flavour.