topic Re: 3rd party or OpenVPN client and Check Point RA in SASE and Remote Access

3rd party or OpenVPN client and Check Point RA

Shahar_Grober — Wed, 27 Mar 2019 15:25:26 GMT

Hi, Is there a way to connect using OpenVPN client to Check Point Gateway RA VPN If so, is there any documentation about it? If not, How can a Linux computer connect to Check Point Gateways via RA VPN?

Re: 3rd party or OpenVPN client and Check Point RA

G_W_Albrecht — Wed, 27 Mar 2019 15:51:50 GMT

You can find all the information here: sk67820: Check Point Remote Access Solutions

Re: 3rd party or OpenVPN client and Check Point RA

Shahar_Grober — Wed, 27 Mar 2019 17:45:13 GMT

I am talking about 3rd party client, is there a way to do so?

Re: 3rd party or OpenVPN client and Check Point RA

PhoneBoy — Thu, 28 Mar 2019 01:27:08 GMT

We need to fix your username again 😬
OpenVPN is not supported as a VPN client.
Theoretically you can use L2TP over IPsec clients but I haven't done this recently.

Re: 3rd party or OpenVPN client and Check Point RA

PhoneBoy — Thu, 28 Mar 2019 01:29:35 GMT

Only type of third party clients that used to work were L2TP over IPSEC.
I haven't done it recently, though.

Re: 3rd party or OpenVPN client and Check Point RA

Matthias_Haas — Thu, 28 Mar 2019 07:20:42 GMT

many years ago, I used FreeS/WAN in RoadWarrior mode to connect to a checkpoint gateway like a SecuRemote User

It was configured more or less like this:

http://www.fw-1.de/aerasec/ng/vpn-freeswan/CP-FW1-NG+Linux-FreeSWAN-RoadWarrior.html

of course, it´s a bit outdated, not supported, may not work with R80.x etc, etc. 🙂
So, nothing I would use/recommend for a productive environment

Re: 3rd party or OpenVPN client and Check Point RA

G_W_Albrecht — Thu, 28 Mar 2019 11:28:23 GMT

Yes, i do know what you are talking about - as there is not supported 3rd party client, i have answered part two of your question : If not, How can a Linux computer connect to Check Point Gateways via RA VPN?

---> this is answered here...

Re: 3rd party or OpenVPN client and Check Point RA

AK2 — Wed, 23 Feb 2022 22:23:08 GMT

Is it correct to say Check Point does not support any 3rd party VPN client connecting via IPSEC or TLS to a Check Point gateway?

E.g. OpenVPN, Native Android VPN, Windows 10 Always on VPN?

So the above are in the "might work with Check Point today, but might not work with Check Point tomorrow" basket?

And, therefore, an up-to-date VPN client provided by Check Point would be the recommended solution?

Thanks

Re: 3rd party or OpenVPN client and Check Point RA

PhoneBoy — Thu, 24 Feb 2022 15:13:12 GMT

The only third party VPN client we officially support is StrongSWAN, and only from R81 onward.
See: https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_RemoteAccessVPN_AdminGuide/Topics-VPNRG/strongsSwan-Client-Support.htm?Highlight=strongswan
Beyond that, we only support our own clients.