topic Re: Endpoint Security Client - Post connect script in SASE and Remote Access

Endpoint Security Client - Post connect script

Paul_Joslin — Tue, 17 Jul 2018 11:05:50 GMT

Can anyone please remind me where in Checkpoint I might set a post connect script to be run on a remote client machine after the Endpoint Security Client has successfully connected remote VPN? This would be a batch file script is to map network drives & printers etc. I've looked through the VPN Admin Guide & online, but I'm struggling to find the right information - only instructions with SSL extender. I've looked in: Policy > Global Properties; GW Properties > Mobile Access; Mobile Access [Tab] > Applications.

Thanks in advance...

Re: Endpoint Security Client - Post connect script

Travis_Krings — Wed, 20 Nov 2019 19:53:12 GMT

I am also looking for the same answer. Did you ever figure this out?

Re: Endpoint Security Client - Post connect script

Danny — Thu, 21 Nov 2019 16:02:37 GMT

Simply use Windows Task Scheduler to check every minute if the VPN is up, then run your tasks.

Re: Endpoint Security Client - Post connect script

Travis_Krings — Thu, 21 Nov 2019 15:21:54 GMT

I suppose that could work, but I'm looking for a way to configure this in the VPN client or gateway so I don't have to push a task to 2000+ workstations. Every other VPN I have used has this ability, so hoping that it is buried somewhere in Check Point too. I saw some references to this in really old CPUG posts, but haven't found anything for current versions.

Re: Endpoint Security Client - Post connect script

AndreiR — Sun, 24 Nov 2019 17:49:44 GMT

Here is excerpt from Remote Access Clients for Windows 32/64-bit E80.72 and Higher administration guide:

Configuring Post Connect Scripts

The Post Connect feature lets you run a script on client computers after connection is established. You must make sure that the script resides on the client computers, in the correct path.

To set the script path:

Open GuiDBedit.
Set desktop_post_connect_script to a full path on client machines for a script that Remote Access Clients will run after a connection is established (leave empty to disable the feature).
Set desktop_post_connect_script_show_window to true to make the script run in a new window. (The default is false. The script runs in a hidden window.).
Save and close GuiDBedit.
Install the policy.

Hope that helps.

Re: Endpoint Security Client - Post connect script

Travis_Krings — Tue, 26 Nov 2019 02:35:29 GMT

Thanks for the info, I missed that info in my search. Does the script really have to reside locally on the client computer? I was assuming I could just point to a UNC path since it is post connect and the client will be on the network at that point.

Re: Endpoint Security Client - Post connect script

Roman_Petry — Thu, 01 Oct 2020 09:52:57 GMT

Hi.. we have the same issue here..

Did you get the UNC Way to work ?

Thanks roman

Re: Endpoint Security Client - Post connect script

tomekpolit — Mon, 09 Nov 2020 13:59:28 GMT

Hi, have Yoy find something about run script from UNC path ?

Re: Endpoint Security Client - Post connect script

Pbeau — Wed, 14 Jul 2021 19:13:29 GMT

Hi,

I can confirm this works with a UNC path.

- Paul