topic Re: Windows 10 Built-in VPN in SASE and Remote Access

Windows 10 Built-in VPN

Simon_Milhomme — Tue, 08 May 2018 14:57:29 GMT

Hi!

Has anyone tried and successfully established a remote access VPN from the Windows 10 built-in client. The client tries IKEv2 and should authenticate with a certificate.

I successfully used Capsule VPN with certificate authentication, it uses SSL.

Any advise?

Re: Windows 10 Built-in VPN

XavierBens — Wed, 09 May 2018 14:37:11 GMT

Already and successfully done with Windows 8 but not through Windows 10.

Nobody tested that?

Re: Windows 10 Built-in VPN

PhoneBoy — Wed, 09 May 2018 20:58:28 GMT

Doesn't Windows 10 have a PPTP client built in like earlier versions?

I assume it works similarly to past releases but I haven't tried it myself.

Re: Windows 10 Built-in VPN

Simon_Milhomme — Thu, 10 May 2018 12:27:00 GMT

The Win10 Always-On VPN features a Device Tunnel which has to be IKEv2 and Certificate.

I see IKE packets hitting the gateway but nothing more. Any advise on how to troubleshoot that? Increase what kind of debug?

Thanks!

Re: Windows 10 Built-in VPN

PhoneBoy — Thu, 10 May 2018 14:39:26 GMT

Start here: How to run complete VPN debug on Security Gateway to troubleshoot VPN issues?

I would also engage with our TAC as well: Contact Support | Check Point Software

Re: Windows 10 Built-in VPN

Henning_Gunders — Wed, 08 Aug 2018 16:35:34 GMT

You can not use the "Windows 10 built-in client" directly.
You need to install the "CheckPoint Capsule VPN" client first, and use this as the VPN provider.

Here is the link from the Microsoft Store:
Get Check Point Capsule VPN - Microsoft Store

Warning: This client is outdated, so why not use the latest fully featured Endpoint VPN client instead?
Also: A license for Check Point Mobile is required on the Security Gateway. License count per concurrent connected devices

Re: Windows 10 Built-in VPN

Louis_Poulin — Thu, 07 Mar 2019 13:14:00 GMT

Henning, why do you say that Capsule VPN is an outdated client?

Re: Windows 10 Built-in VPN

Henning_Gunders — Fri, 08 Mar 2019 08:18:39 GMT

The Capsule VPN was released way back in 2014... Maybe that's why?
Also the latest release notes for Win10 is dated september 2015...
(At least the client for iPhone/iPads are getting updated...)

BUT, if you want to secure desktop Windows 10 clients, why not use the full feature set of the Check Point Endpoint VPN client?

Re: Windows 10 Built-in VPN

Louis_Poulin — Wed, 13 Mar 2019 12:43:00 GMT

Thanks, but the Endpoint solution requires licenses and that is not an option for now. Hopefully in the near future!