topic Re: Prevent VPN client from launching automatically on OSX? in General Topics

Prevent VPN client from launching automatically on OSX?

Robert_Csapo — Mon, 02 Jul 2018 07:02:05 GMT

Hi all,

I'm using the Endpoint Security E80.71 VPN client on a Macintosh computer (OS 10.11.6). Does anyone know how to prevent the program from launching automatically upon startup? I have already tried to edit

--> /Library/LaunchAgents/com.checkpoint.eps.gui.plist

--> /Library/LaunchDaemons/com.checkpoint.epc.service.plist (setting <key>RunAtLoad</key> to <false/> in both cases)

and disabled the Always-Connect option in the GUI.

The program still starts automatically.

I'd be very grateful for any advice.

Thanks,

Robert

Re: Prevent VPN client from launching automatically on OSX?

Danny — Mon, 02 Jul 2018 09:24:31 GMT

So you already Google'd and that solution doesn't help you. So try this one or open a Service Request with TAC.

Re: Prevent VPN client from launching automatically on OSX?

Robert_Csapo — Mon, 02 Jul 2018 10:17:01 GMT

Thank you for your suggestions, Danny. Actually, I'm not looking for a shell script to close the client, I'd like to prevent it from automatically starting up in the first place. In fact, it's quite incomprehensible why something so elementary should require manual editing of .plist files or shell scripts to be run. This should be either controllable through the GUI or the OS's system preferences (the Endpoint Security client does not show up under the Login Items). I'll send an email to Amir Yacoby from the TAC and post his reply here.

Re: Prevent VPN client from launching automatically on OSX?

Jacobo_Vidal_Pa — Mon, 10 Sep 2018 20:00:24 GMT

Do you have any answer, Robert? I have the same problem and it's very annoying...

Re: Prevent VPN client from launching automatically on OSX?

PhoneBoy — Mon, 10 Sep 2018 20:16:46 GMT

The Mac VPN client does more than VPN, it's also a firewall.

I'm guessing this firewall is the real issue and not the fact the VPN client loads

The firewall is enforced through the kernel module that is loaded, which is by design.

The only options I see are:

Ask your admin to configure a more permissive firewall for your needs.
Not load (or even unload) the relevant kernel module.

Re: Prevent VPN client from launching automatically on OSX?

Dr__Matthias_H_ — Sun, 20 Jan 2019 15:20:43 GMT

Sorry, but that completely misses the point. Question is not, whatever the VPN client program is doing - question is very simple, how can it be prevented to start automatically?

Obviously there should be some solution for this, as it is easily possible to stop the client from the menubar after it has automatically started. If I had been in charge of testing this software, it would not have gotten released - it is completely incomprehensible to implement a piece of software without allowing to configure whether it will start automatically or not easily in its GUI. *THIS* is the problem here.

I will definitely *never* recommend this kind of VPN client to anybody - no matter the features. Implementing software like this is just completely unreasonable. Please refer back to Software Engineering 101.

Re: Prevent VPN client from launching automatically on OSX?

Philip_Chenette — Wed, 06 Feb 2019 14:25:23 GMT

I also have this question. How is the Endpoint dialog box disabled or hidden?

Or must I uninstall the VPN client to eliminate the dialog?

Re: Prevent VPN client from launching automatically on OSX?

C_Rocco — Sat, 13 Apr 2019 02:02:00 GMT

Actually, if you connect to your VPN and open the client (Show Client), entering at the connection properties you can disable the option "Enable Always-Connect". This might prevent the client to pop-up after you Mac restart.

Re: Prevent VPN client from launching automatically on OSX?

Robert_Csapo — Thu, 13 Feb 2020 07:43:21 GMT

Disabling the "Enable Always-Connect" option does not work for me. So far I yet need to find a way to prevent the program from starting up automatically. Quite a **bleep**ty piece of software…

Re: Prevent VPN client from launching automatically on OSX?

Hugo_vd_Kooij — Wed, 08 Apr 2020 14:11:37 GMT

What is your company policy in regard to this? If they considere the client to be mandatory for access to the netwoek the installation might be set to disallow you to do disable it to startup at boot time.

While you may not agree with hti spolicy it might very well be something that is part of the deal.