topic Why is my VPN broken on OSX? in SASE and Remote Access

Why is my VPN broken on OSX?

Ryan_Turner — Fri, 19 Jan 2018 21:01:16 GMT

Hi all,

I'm trying to connect to my corporate VPN. The Windows client works perfectly. The OSX client appears to connect successfully, but does not actually forward any traffic. (That is, I can't get to any resources, including the public Internet, while the OSX VPN is connected).

The Windows client has an extra "Compliance" section that OSX does not show (see screenshots). So, questions:

1) Is the OSX client failing the compliance check, or not performing it at all?

2) If the compliance check is failing, is there some way (perhaps in the logs) to figure out what rule is causing it to fail?

Any hints appreciated!

Re: Why is my VPN broken on OSX?

PhoneBoy — Fri, 19 Jan 2018 22:22:36 GMT

What version of the Mac VPN client are you using?

It definitely has a Compliance option, though I imagine the options will be somewhat different for Mac versus PC.

Here's a snapshot from my own Mac VPN client.

Re: Why is my VPN broken on OSX?

Ryan_Turner — Fri, 19 Jan 2018 22:54:41 GMT

Hi Dameon thanks for looking into the issue!

Please find below screenshot for checkpoint (E80.71)

My Mac version

Re: Why is my VPN broken on OSX?

PhoneBoy — Fri, 19 Jan 2018 23:17:49 GMT

Compliance is only available with the centrally managed VPN client.

Are you using the standalone version available here? Enterprise Endpoint Security E80.71 Mac Clients

The managed version can only be obtained from Check Point TAC currently.

Re: Why is my VPN broken on OSX?

Ryan_Turner — Wed, 24 Jan 2018 21:18:11 GMT

Thanks Dameon, I was able to get this to work with this version: E80.64 Check Point Endpoint Security VPN for macOS - Automatic Upgrade package (PKG). Much obliged for your help!