topic Re: why does MABDA still require Java? SNX replacement in SASE and Remote Access

why does MABDA still require Java? SNX replacement

Garrett_DirSec — Wed, 13 Nov 2019 20:34:42 GMT

Hello -- I was under impression that R&D actively working on replacement of the legacy JAVA-based SNX.

The expectation was was new HTML5-based architecture with JAVA not part of equation. Example: customer who would like to completely remove JAVA from any endpoint device.

The following SK has been referenced multiple times on checkmates. Why is JAVA still an installation requirement on Windows (example: it's needed for endpoint compliance check)?

apologies for the potentially dense question. thx

sk113410 - Mobile Access Portal and Java Compatibility - New Mobile Access Portal Agent technology

Re: why does MABDA still require Java? SNX replacement

PhoneBoy — Wed, 13 Nov 2019 22:19:54 GMT

Historically, at least, the two main features that use Java: SNX and Endpoint Compliance Check.
Not sure exactly when it's planned to remove the requirement for Java entirely.

Re: why does MABDA still require Java? SNX replacement

Garrett_DirSec — Thu, 14 Nov 2019 15:27:11 GMT

thanks @PhoneBoy

I suspect the issue with "replacing JAVA" is likely a miscommunication of what R&D doing. Is it correct the the previous SNX (SSL network extender) was leveraging the legacy NPAPI browser extensions that have been deprecated by most modern browsers?

So Check Point had to provide a near-term solution that would support Firefox and Chrome across as many platforms as possible.

https://support.mozilla.org/en-US/kb/npapi-plugins

Is removing JAVA installation requirement something on road-map for SNX?

Re: why does MABDA still require Java? SNX replacement

PhoneBoy — Thu, 14 Nov 2019 16:34:12 GMT

I was incorrect about our usage of Java.
It's actually required for MABDA, the Mobile Access Blade Deployment Agent.
It's a cross-platform way to deploy the SNX and Compliance Check components, neither of which use Java.
Previously, yes, NPAPI was part of the equation as MABDA was deployed as a Java-based plugin previously.
Now it is implemented as a Java application, thus why we still need the JDK to be installed.

We are looking at removing the requirement for Java, but don't have a specific timeframe for doing so.

Re: why does MABDA still require Java? SNX replacement

Wiesmann — Thu, 01 Jul 2021 08:21:31 GMT

Hi,

I would like to get this discussion opened again.

is there any news for the requirement of JDK to be used for SNX ?
Many thanks

Jürg

Re: why does MABDA still require Java? SNX replacement

G_W_Albrecht — Thu, 01 Jul 2021 08:37:38 GMT

As of 18-Feb-2021:

sk11341: Windows users are required to have Java Runtime Environment (JRE) version 8 or Oracle OpenJDK version 11 installed. macOS users are required to have Java Development Kit (JDK) version 8 or Oracle OpenJDK version 11 installed.

sk119772: All Linux OSs require the Oracle JRE 8 or the Oracle OpenJDK 11 to be installed.

Re: why does MABDA still require Java? SNX replacement

Wiesmann — Thu, 01 Jul 2021 20:54:20 GMT

Thank you,

Yes I understand, so there are still no plans to move this to HTML 5 🙂

Kind Regards

Jürg

Re: why does MABDA still require Java? SNX replacement

PhoneBoy — Thu, 01 Jul 2021 22:00:16 GMT

Believe this still in the long term roadmap.
Recommend bringing this through Solution Center internally.