topic Re: mobile access blade question in SASE and Remote Access

mobile access blade question

Daniel_Kavan — Fri, 12 Sep 2025 15:19:38 GMT

why do I have to install the Check Point Mobile Access Portal Agent when I am connecting via a Windows 11 laptop and not a mobile device?

I have a user who is asking why he doesn't need to install portal agent on his mobile phone to get to the portal.

Does any one have a link to what the mobile access portal agent vs deployment agent do?

Re: mobile access blade question

Chris_Atkinson — Fri, 12 Sep 2025 14:22:32 GMT

Mobile Access is just the marketing name for SSL VPN.

There are multiple methods of access depending on the configuration, client vs portal etc.

Re: mobile access blade question

the_rock — Mon, 15 Sep 2025 02:14:18 GMT

Component	Purpose / Function	When / Why It’s Needed
Mobile Access Portal Agent	This is a component used when you access the Check Point Mobile Access portal from a desktop/laptop browser to enable full access (for example, to use native apps via SSL VPN, access file shares, RDP, or other network-resources not purely web-based). It allows the portal to support non-web-only features by installing a helper agent. It also can help with “Network Mode” or “SSL Network Extender / SNX” type connectivity. (Checkpoint)	Mostly needed on desktops/laptops when the user needs more than just browser/web-access (e.g. when using web portal + native applications, resource share access, etc.). On mobile OS (iOS/Android), Check Point uses dedicated apps (Capsule Workspace, etc.) which already include needed capabilities, so the portal agent is not needed. (Checkpoint)
Deployment Agent	This is a service/agent (often running on domain-joined Windows endpoints) that allows remote deployment / pushing of Check Point Endpoint Security / VPN clients or other endpoint components. It helps administrators centrally manage installing or updating endpoint-side client-software via Active Directory domains. It typically is an initiator for remote install requests on target workstations in the same AD domain. (Checkpoint)	Used for endpoint management and ensuring devices are compliant / have the correct endpoint software installed / kept up to date. Not typically involved in the “end-user connecting via portal” day-to-day, unless new client components need to be pushed.

Re: mobile access blade question

Daniel_Kavan — Mon, 15 Sep 2025 16:01:40 GMT

thanks!!

Re: mobile access blade question

the_rock — Mon, 15 Sep 2025 16:02:38 GMT

fyfoc = for you free of charge 😉