topic Looking help for SNX Raspberry Pi development... in SASE and Remote Access

Looking help for SNX Raspberry Pi development...

juanperiz — Tue, 24 Dec 2019 22:37:00 GMT

Hi, folks!

Is there anyone out there who'd like to help me develop a Raspbian SNX client?

Did some research about the two basic stages SSL VPN / SNX Extender / (Old) MAB goes through, which are SSL negotiation and VNA/TUN setup but still i'm far from understanding the whole picture...

Re: Looking help for SNX Raspberry Pi development...

PhoneBoy — Wed, 25 Dec 2019 01:58:15 GMT

Why develop something when you can use standard L2TP/IPsec clients (at least with R80.30)?

https://community.checkpoint.com/t5/Remote-Access-Solutions/C2S-L2TP-over-IPSEC-Linux-VPN-with-R80-30-working/m-p/68069#M2175
https://community.checkpoint.com/t5/Remote-Access-Solutions/C2S-strongSwan-Roadwarrior-and-R80-30-working/m-p/67619#M2157
https://community.checkpoint.com/t5/Remote-Access-Solutions/C2S-Libreswan-3-23-Roadwarrior-and-R80-30-working/m-p/67129#M2129

Re: Looking help for SNX Raspberry Pi development...

juanperiz — Thu, 26 Dec 2019 19:57:02 GMT

Thanks for the fast reply!

*SWAN was our very first option in order to deploy several SBCs connected to R80.30 but we couldn't get it done...

Seems SNX it's the simplest option from the operative point of view, even though I guess (maybe wrong) SNX binary would have a deeper impact in CPU Usage because it works at the userpace level instead of kernelspace as *SWAN does...

Re: Looking help for SNX Raspberry Pi development...

PhoneBoy — Thu, 26 Dec 2019 20:27:26 GMT

SNX is proprietary.
Even if you were to reverse engineer SNX enough to create a third party client, it most likely wouldn’t be supported.

That said, you should discuss the specific use case in detail with your local Check Point office.
There may be other ways to achieve your end goals.

Re: Looking help for SNX Raspberry Pi development...

juanperiz — Thu, 26 Dec 2019 23:05:30 GMT

Yeah... but whilst ago none client were round there for iPhone, Android and even Windows Phone 'til Capsule came along, and with all the SBC/IoT-era (Odroid N2, Raspi4, etc, etc.) I hope Checkpoint realize it's not only Windows Platform it should point to its development 😉

Many Thanks PhoneBoy for your time and concern!

Re: Looking help for SNX Raspberry Pi development...

PhoneBoy — Fri, 27 Dec 2019 01:02:52 GMT

In general, we have plans in the IoT space.
I suspect we'll have some things to share about these plans during the upcoming CPX 360 conferences.

Even so, it's best to discuss your specific requirements in this area with your local Check Point office.