topic Re: checkpoint mobile access vpn in linux centos in SASE and Remote Access

checkpoint mobile access vpn in linux centos

Pantsu — Tue, 10 Dec 2019 11:59:58 GMT

hello
i want to install checkpoint mobile access vpn client in linux (centos) machine, how can i do it ?

Re: checkpoint mobile access vpn in linux centos

mdjmcnally — Tue, 10 Dec 2019 13:32:38 GMT

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk119772&partition=General&product=Mobile

Should be what need to do then browse and should download / install the SSL Network Extender.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk113410

Confirms what Browsers work and what Patch Level need to be at on the Gateway

Re: checkpoint mobile access vpn in linux centos

Pantsu — Wed, 11 Dec 2019 08:12:10 GMT

thankyou , i understand it but, i have linux server without graphical interface. and how can i do it in this linux server. ?

Re: checkpoint mobile access vpn in linux centos

mdjmcnally — Wed, 11 Dec 2019 10:54:28 GMT

Short answer is you won't. The Thin Client is Browser based so would be needing the GUI.

Is there a reason that a Server needs a Client-Server VPN. I believe that a Site to Site VPN that only permits the access to the Server would be more practical.

Re: checkpoint mobile access vpn in linux centos

PhoneBoy — Mon, 16 Dec 2019 02:34:07 GMT

If you can't use SNX but have an R80.30 gateway, you can try one or more of the following:

https://community.checkpoint.com/t5/Remote-Access-Solutions/C2S-L2TP-over-IPSEC-Linux-VPN-with-R80-30-working/m-p/68069#M2175
https://community.checkpoint.com/t5/Remote-Access-Solutions/C2S-Libreswan-3-23-Roadwarrior-and-R80-30-working/m-p/67129#M2129
https://community.checkpoint.com/t5/Remote-Access-Solutions/C2S-strongSwan-Roadwarrior-and-R80-30-working/m-p/67619#M2157

Note that I don't believe any of the above instructions will work with releases prior to R80.30.

Re: checkpoint mobile access vpn in linux centos

Harshpal_Bhati — Tue, 17 Dec 2019 04:03:09 GMT

L2TP can be an option here but afaik L2TP will tunnel whole traffic .

Re: checkpoint mobile access vpn in linux centos

Harshpal_Bhati — Tue, 17 Dec 2019 04:09:28 GMT

Also to add One of my large customer has replaced TMG proxy with SNX they use SNX to route internet traffic from servers as they do not have public routing enable in backbone . In some cases Linux server and Windows server dont have browser and even no option to define proxy to get them internet access . I am exploring some workarond for same my test is still in progress ..

Let me know if any one have better idea

Re: checkpoint mobile access vpn in linux centos

BigAnt — Tue, 12 Oct 2021 09:31:00 GMT

(Unofficial) open-source analog can work without graphical interface. However IPSec-based solutions is better suited for unattended use cases.