topic Re: Removing Desktop policy in SASE and Remote Access

Removing Desktop policy

ascoyne — Wed, 17 Jul 2024 17:12:35 GMT

We currently have a Desktop policy enabled on our Check Point VPN endpoints. We know how to manage the Desktop policy and how to allow end-users the ability to temporarily disable the policy, but how do we remove the desktop policy so it is no longer applied to endpoints? We do not want a local Check Point Firewall on our endpoints, but we still want the ability to use VPN.

Re: Removing Desktop policy

the_rock — Wed, 17 Jul 2024 17:48:00 GMT

Make sure its removed from policy layer, then uncheck it from gateway (cluster) properties. If you have any issues, happy to do remote.

Andy

Re: Removing Desktop policy

ascoyne — Thu, 18 Jul 2024 08:11:01 GMT

Thank you @the_rock - you are a superstar.

Re: Removing Desktop policy

the_rock — Thu, 18 Jul 2024 10:48:49 GMT

Glad we can help. Did that work?

Andy

Re: Removing Desktop policy

ascoyne — Thu, 22 Aug 2024 12:55:42 GMT

I will be applying the change next week. I will update you.

Re: Removing Desktop policy

the_rock — Thu, 22 Aug 2024 12:57:25 GMT

No worries! Message me if any issues.

Andy

Re: Removing Desktop policy

ascoyne — Thu, 29 Aug 2024 16:47:49 GMT

Hi @the_rock, I have applied the change and VPN still works. I was expecting the VPN client to show Firewall disabled, but it doesn't. However it does show Security Policy disabled, so perhaps I'm overthinking it.

Is this expected? And does it mean the local Check Point is still on?

Re: Removing Desktop policy

the_rock — Thu, 29 Aug 2024 16:50:03 GMT

Make sure there is no reference of it in legacy dashboard and also, as a test, I would try delete/re-create the site and see the status when you connect.

Andy

Re: Removing Desktop policy

ascoyne — Thu, 29 Aug 2024 16:57:56 GMT

@the_rock you are a superstar! I have deleted the site and re-added and the Firewall policy is now Not Configured.

Re: Removing Desktop policy

the_rock — Thu, 29 Aug 2024 17:32:38 GMT

Ah, its nothing my friend...put it this way. My life mentality was always something like this...no matter where you go or who you help, we are all different, some people may know more than others, some people less, BUT, if we do things TOGETHER, there is nothing that cant be achieved. I had seen it myself all over the world, so I try to inspire others to try do the same.

Anyway, did not mean to sound "cheesy" : - )

Glad it worked for you.

Andy