topic Mobile Access Portal and Deprecation of Java on Browsers in SASE and Remote Access

Mobile Access Portal and Deprecation of Java on Browsers

PhoneBoy — Thu, 29 Jun 2017 20:59:01 GMT

Various browsers have deprecated support for NSAPI, which eliminated the mechanism by which Java could be integrated with a web browser.

This has impacted the use of SSL Network Extender (SNX), Compliance Scan, and Secure Workspace rom the Check Point Mobile Access Portal.

Check Point has developed a new Mobile Access Deployment Agent technology to remove this limitation, and it was recently released.

Refer to the following SK: Mobile Access Portal and Java Compatibility

Re: Mobile Access Portal and Deprecation of Java on Browsers

Arnvid_Karstad — Sat, 05 Aug 2017 22:15:53 GMT

Why does the R80.10 gateways still complain about JAVA when we have this new tech? I keep getting the feedback from one of our customers support team that the users keep seeing this?

Re: Mobile Access Portal and Deprecation of Java on Browsers

Arnvid_Karstad — Sat, 05 Aug 2017 22:18:07 GMT

Actually reading the SK it show why it's like that now and not 4 weeks ago

Re: Mobile Access Portal and Deprecation of Java on Browsers

PhoneBoy — Sat, 05 Aug 2017 22:24:48 GMT

Right, just to clarify: it's only currently available for a specific Jumbo Hotfix release of R77.30.

It is expected to be available for later R77.30 Jumbo Hotfixes as well as R80.10 in the coming weeks.

If you are interested in using the EA release, contact your Check Point SE.

Re: Mobile Access Portal and Deprecation of Java on Browsers

Douglas_Araujo1 — Tue, 26 Sep 2017 04:18:44 GMT

The R80.10 version of this hotfix was released and after install on the customer gateway we detected that the client machine still needs Java (32 bits) as SK109125.

There is a way to "pack" Java installer and the new Mobile Agent on a single installer?

Best regards,

Douglas

Re: Mobile Access Portal and Deprecation of Java on Browsers

PhoneBoy — Tue, 26 Sep 2017 05:20:31 GMT

While I suppose it's technically possible, there's a couple of issues:

Java is updated fairly regularly, thus you would need to update this combined installer regularly to ensure your users got the latest JRE.
Java requires admin rights to install, which would be problematic for users who do not have the appropriate privileges.