topic Re: is there a way to set an unlimited expiration time for remote access office mode? in SASE and Remote Access

is there a way to set an unlimited expiration time for remote access office mode?

Paolo_Francese — Tue, 17 Apr 2018 08:29:54 GMT

Hi cp mates,
I'm trying to set up a remote access office mode connection that not expire or at least a way to automatically reconnect the VPN without user intervention.

In Check Point Mobile I've set Auto-Connet flag, but when expiration time (8 hours) is reached the connection is dropped.

In the gateway global properties I've seen the "Enable Password Caching" option, but also this option has an expiration timeout.

Any idea is welcome.

Thanks in Advance
bye

Re: is there a way to set an unlimited expiration time for remote access office mode?

Gaurav_Pandya — Tue, 17 Apr 2018 11:38:34 GMT

Hi,

You can increase time out with below setting.

For automatically connect, you can use below feature in endpoint client.

Re: is there a way to set an unlimited expiration time for remote access office mode?

Paolo_Francese — Tue, 17 Apr 2018 12:45:37 GMT

Hi Gaurav,

I'm aware about these timeouts but I want that the VPN connection never expire.

bye

Re: is there a way to set an unlimited expiration time for remote access office mode?

Paolo_Francese — Wed, 18 Apr 2018 12:04:53 GMT

Hi everyone,

I think this is not the best way to do it, but I've no time to learn how Check Point Mobile for ATM works, so I scheduled this task to run every minute

set trac-cmd="%PROGRAMFILES(X86)%\CheckPoint\Endpoint Connect\trac.exe"
%trac-cmd% info -s <site_name> | findstr /C:"status: Connected" || %trac-cmd% connect -s <site_name> -u <user_name> -p <password>

bye

Re: is there a way to set an unlimited expiration time for remote access office mode?

G_W_Albrecht — Thu, 19 Apr 2018 13:53:32 GMT

usually you only need a ping to achieve that

Re: is there a way to set an unlimited expiration time for remote access office mode?

Adi_Babai — Mon, 23 Apr 2018 14:28:40 GMT

Hi,

There is no way to set unlimited expiration.

I think it is not a good practice to have a tunnel which is not expired with no reauthentication, for example in case the user's password has been changed.

Thanks,

Adi

Re: is there a way to set an unlimited expiration time for remote access office mode?

Lucas_Padovani — Thu, 04 Oct 2018 13:14:48 GMT

Thanks a lot Paolo Francese!

You'd not know how many time I was searching for this script, you saved me a lot of work and time!