topic Windows Capsule VPN in SASE and Remote Access

Windows Capsule VPN

WinnyPuh — Tue, 15 Oct 2024 12:35:30 GMT

I am currently trying to configure Checkpoint Capsule VPN via Intune. The authentication should be done using a user certificate, which is delivered to the client via SCEP. In the VPN profile, I have specified the SCEP profile, but during the first connection, the certificate to be used must always be selected manually. Is there a way to optimize the profile so that the certificate is selected automatically? Unfortunately, I cannot find any useful documentation for Capsule VPN on Windows.

Re: Windows Capsule VPN

PhoneBoy — Tue, 15 Oct 2024 18:36:15 GMT

Capsule VPN is a wrapper for the VPN client built into Windows.
From this, I get the impression you can specify the certificate used in Intune: https://learn.microsoft.com/en-us/mem/intune/configuration/vpn-settings-windows-10

Re: Windows Capsule VPN

WinnyPuh — Wed, 16 Oct 2024 07:16:36 GMT

Yes exactly, I have selected the SCEP profile on the basis of which the certificate should be selected in the configuration profile. Unfortunately, it makes no difference.