topic Re: Unable to uncheck SSL Network Extender (SNX) in SASE and Remote Access

Unable to uncheck SSL Network Extender (SNX)

yeruel — Thu, 23 Jan 2025 01:14:22 GMT

Dear Checkmates,

Please kindly provide your usual support to disable SSL Network Extender(SNX) in web - ssl vpn with web browsers. We just want only portal URL, we don't need to SSL Network extender (SNX). To uncheck the SSL Network Extender in the Check Point Mobile Access web portal, navigate to the "Mobile Access" section in SmartConsole, then under "VPN Clients", locate the SSL Network Extender settings and simply uncheck the box enabling it; essentially disabling the option for users to access the network using the SSL Network Extender client through the Mobile Access portal. We are unable to uncheck the SSL Network Extender (SNX).

One of my customer wants to disable SSL Network Extender feature but still still want to have the remote access VPN solution.

Version Gaia R81.20

and Policy Source Unified Access Policy

Re: Unable to uncheck SSL Network Extender (SNX)

the_rock — Thu, 23 Jan 2025 01:13:19 GMT

I dont have access to my lab brother to test, but you are definitely on the right track. Are you able to uncheck "other" option?

Andy

Re: Unable to uncheck SSL Network Extender (SNX)

yeruel — Thu, 23 Jan 2025 01:17:26 GMT

Andy,

I am able to check the top web -SSL VPN with the web browsers, but unable to uncheck the SSL network extender (SNX)

Re: Unable to uncheck SSL Network Extender (SNX)

the_rock — Thu, 23 Jan 2025 01:20:36 GMT

Try uncheck web in first screenshot, push policy, then try remove ssl option in 2nd screenshot.

Andy

Re: Unable to uncheck SSL Network Extender (SNX)

PhoneBoy — Thu, 23 Jan 2025 13:44:28 GMT

I suspect it's only possible to disable SNX when Mobile Access Blade is NOT used.
TAC may be required here.

Re: Unable to uncheck SSL Network Extender (SNX)

the_rock — Thu, 23 Jan 2025 17:35:02 GMT

That makes sense.

Re: Unable to uncheck SSL Network Extender (SNX)

Duane_Toler — Fri, 24 Jan 2025 01:51:01 GMT

Select "General Properties" on the left, then on the right at the bottom in the list of products, uncheck Mobile Access Blade. Now you can remove it from the list of VPN Clients. You don't need Mobile Access Blade if you only want the VPN client (installed as "Endpoint Security VPN"). You still have access to Office Mode and everything, just not the SSL VPN portal.

Re: Unable to uncheck SSL Network Extender (SNX)

the_rock — Fri, 24 Jan 2025 13:46:21 GMT

Im also sure that would fix it. @yeruel Can you try that?

Andy

Re: Unable to uncheck SSL Network Extender (SNX)

yeruel — Fri, 24 Jan 2025 22:45:09 GMT

But the users want to use portal url login to access like web applications.

Re: Unable to uncheck SSL Network Extender (SNX)

Duane_Toler — Fri, 24 Jan 2025 22:54:34 GMT

Ah. Then you can't disable SNX and retain the portal. That's part of the Mobile Access Blade.