topic Re: Is it possible to limit older versions of Check Point Mobile VPN client ? in SASE and Remote Access

Is it possible to limit older versions of Check Point Mobile VPN client ?

Dilian_Chernev — Fri, 08 Aug 2025 12:18:13 GMT

Hi mates,

Is there a way to limit older versions of Check Point Mobile VPN client to connect to the network?

For example, to prevent versions earlier than E87 to establish VPN or to limit access to the network.

Maybe with Endpoint Security will be possible, but there are Mobile Unlimited licenses only.

Thanks,

Dilian

Re: Is it possible to limit older versions of Check Point Mobile VPN client ?

the_rock — Fri, 08 Aug 2025 19:30:33 GMT

Hey Dilian,

I was thinking it could be controlled with access role object, but it only gives an option for endpoint client, not version.Let us know if you find out how to do this, its great question. Did you ask TAC?

Andy

Re: Is it possible to limit older versions of Check Point Mobile VPN client ?

Chris_Atkinson — Sat, 09 Aug 2025 00:39:20 GMT

Please see sk180879 otherwise you might need to explore SVC.

Re: Is it possible to limit older versions of Check Point Mobile VPN client ?

Dilian_Chernev — Mon, 11 Aug 2025 08:39:12 GMT

It seems with SCV, I can read client version from windows registry and take decision after.

Just not sure if I have to enable the Desktop policy to use this feature.

Re: Is it possible to limit older versions of Check Point Mobile VPN client ?

emmap — Mon, 11 Aug 2025 09:49:35 GMT

You do need desktop policy active to use SCV.

Re: Is it possible to limit older versions of Check Point Mobile VPN client ?

the_rock — Mon, 11 Aug 2025 12:47:59 GMT

As @emmap had said, yes, you do need to enable that feature. Without it, wont work.

Andy