topic Re: Endpoint Security to Mobile - Firewall active in SASE and Remote Access

Endpoint Security to Mobile - Firewall active

Uzo — Wed, 28 Feb 2024 07:27:24 GMT

Hi guys,

i hope you can help me with my problem.

We have many Clients with the client_sub_type = EndpointSecurity and we change the edition to mobile. The client works with the mobile edition but looks like the firewall is still active. How is that possible? I thought the mobile version has no firewall. How can i disable the firewall? Even if i uninstall Checkpoint, the firewall is active and i can't reach the client in the network.

I have to change the client_sub_type back to EndpointSecurity in the registry, uninstall it and install it as mobile version again. To get it running. But the setup often stuck during uninstallation(msiexec processes don't close).

We use V 87.50 at the moment

Any ideas? 🙂

Re: Endpoint Security to Mobile - Firewall active

G_W_Albrecht — Wed, 28 Feb 2024 16:40:07 GMT

I have never heard of that issue with the StandAlone RA VPN Enterprise client. Usually changing the flavour in registry is enough (https://community.checkpoint.com/t5/Remote-Access-VPN/Changing-the-Standalone-Remote-Access-Client-flavor/m-p/39494#M1438) - i would consult CP TAC as this seems a bug with current versions according to your experiences

Re: Endpoint Security to Mobile - Firewall active

Uzo — Fri, 01 Mar 2024 07:08:26 GMT

Hi Albrecht,

i don't know why it happens but i found a solution to fix that firewall part(that takes the pressure out of it).

Open CMD -> netcfg -s n -> Shows the network services -> netcfg -v -u ms_ndislwf Zone Alarm Firewall Driver with this i can disable the unneeded firewall service. After run that script the checkpoint FW is disabled. I don't know why this was still there and active. Even this was enabled after uninstall checkpoint.

Cheers