https://community.checkpoint.com/t5/Endpoint/StrongSwan-and-SCV/m-p/215189#M8748 <P>SCV can be disabled for clients that don't support it in Global Properties:</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 999px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/25867iF69851B55BC3B8D0/image-size/large?v=v2&amp;px=999" role="button" title="image.png" alt="image.png" /></span></P> Fri, 24 May 2024 14:42:26 GMT PhoneBoy 2024-05-24T14:42:26Z https://community.checkpoint.com/t5/Endpoint/StrongSwan-and-SCV/m-p/215005#M8727 <P>Good day.</P><P>According to manual&nbsp;StrongSwan doesn't support SCV. But are there any options to exclude StrongSwan clients from SCV checking? We need to use StrongSwan and we need to use SCV for Endpoint. Right now it's imposible.</P> Wed, 22 May 2024 14:09:45 GMT https://community.checkpoint.com/t5/Endpoint/StrongSwan-and-SCV/m-p/215005#M8727 akurtasanov 2024-05-22T14:09:45Z https://community.checkpoint.com/t5/Endpoint/StrongSwan-and-SCV/m-p/215189#M8748 <P>SCV can be disabled for clients that don't support it in Global Properties:</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 999px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/25867iF69851B55BC3B8D0/image-size/large?v=v2&amp;px=999" role="button" title="image.png" alt="image.png" /></span></P> Fri, 24 May 2024 14:42:26 GMT https://community.checkpoint.com/t5/Endpoint/StrongSwan-and-SCV/m-p/215189#M8748 PhoneBoy 2024-05-24T14:42:26Z https://community.checkpoint.com/t5/Endpoint/StrongSwan-and-SCV/m-p/215206#M8751 <P>I know about this option. But unfortunately&nbsp;<SPAN>it does not cover strongswan.</SPAN></P> Fri, 24 May 2024 18:27:02 GMT https://community.checkpoint.com/t5/Endpoint/StrongSwan-and-SCV/m-p/215206#M8751 akurtasanov 2024-05-24T18:27:02Z https://community.checkpoint.com/t5/Endpoint/StrongSwan-and-SCV/m-p/215212#M8754 <P>Possible this feature doesn't cover Strongswan since it was only added in R81.<BR />However, it's reasonable to expect it to work since even the product documentation says this isn't supported:&nbsp;<A href="https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_RemoteAccessVPN_AdminGuide/Topics-VPNRG/strongSwan-Client-Support.htm" target="_blank">https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_RemoteAccessVPN_AdminGuide/Topics-VPNRG/strongSwan-Client-Support.htm</A>&nbsp;</P> <P>This should be reported via TAC: <A href="https://help.checkpoint.com" target="_blank">https://help.checkpoint.com</A></P> Fri, 24 May 2024 19:35:10 GMT https://community.checkpoint.com/t5/Endpoint/StrongSwan-and-SCV/m-p/215212#M8754 PhoneBoy 2024-05-24T19:35:10Z https://community.checkpoint.com/t5/Endpoint/StrongSwan-and-SCV/m-p/215214#M8755 <P>From my understanding doesn't support means that strongSwan clients will be excluded from checking but not blocking.</P><P>So I hope that somewhere in registry or config file you have solution for this case.</P> Fri, 24 May 2024 20:31:45 GMT https://community.checkpoint.com/t5/Endpoint/StrongSwan-and-SCV/m-p/215214#M8755 akurtasanov 2024-05-24T20:31:45Z https://community.checkpoint.com/t5/Endpoint/StrongSwan-and-SCV/m-p/215216#M8756 <P>All roads lead to TAC.</P> <P>This checkbox (and the logic behind it) is meant to address non-SCV clients.<BR />The fact it is not working in this case suggests a possible bug.<BR />If this is a bug, TAC would have to confirm.<BR />If there is a fix for this, TAC would have to deliver it.</P> Fri, 24 May 2024 21:26:28 GMT https://community.checkpoint.com/t5/Endpoint/StrongSwan-and-SCV/m-p/215216#M8756 PhoneBoy 2024-05-24T21:26:28Z https://community.checkpoint.com/t5/Endpoint/StrongSwan-and-SCV/m-p/215641#M8778 <P>Found answer&nbsp;</P><P>:skip_firewall_enforcement_check (false) caused trouble. With&nbsp;:skip_firewall_enforcement_check (true) works fine<BR /><BR /><BR /></P> Thu, 30 May 2024 08:58:43 GMT https://community.checkpoint.com/t5/Endpoint/StrongSwan-and-SCV/m-p/215641#M8778 akurtasanov 2024-05-30T08:58:43Z https://community.checkpoint.com/t5/Endpoint/StrongSwan-and-SCV/m-p/215701#M8779 <P>I assume this is in trac.config, right?</P> Thu, 30 May 2024 13:21:24 GMT https://community.checkpoint.com/t5/Endpoint/StrongSwan-and-SCV/m-p/215701#M8779 PhoneBoy 2024-05-30T13:21:24Z https://community.checkpoint.com/t5/Endpoint/StrongSwan-and-SCV/m-p/215839#M8781 <P>No.</P><P>In local.scv file <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Fri, 31 May 2024 05:34:40 GMT https://community.checkpoint.com/t5/Endpoint/StrongSwan-and-SCV/m-p/215839#M8781 akurtasanov 2024-05-31T05:34:40Z