topic Check Point Mobile in SASE and Remote Access

Check Point Mobile

Daniel_Kavan — Wed, 25 Oct 2023 12:45:20 GMT

RE: sslvpn

Users are being prompted to install a certifcate form a CA claiming to represent Check Point Mobile.

Windows cannot validate the certificate is actually from Check Point Mobile.

Thumbprint (sha1) 71F....

Warning: If you install this root certifcate...

Where to I go in the manager to verify the thumbprint? The thumbrint in portal settings on that gateway is not matching.

Re: Check Point Mobile

G_W_Albrecht — Wed, 25 Oct 2023 13:24:17 GMT

This is the self-signed CP GW certificate - not CPs... See:

sk69660: How to generate Server Certificate Signing Request (CSR) and import the new 3rd Party certificate to Mobile Access Blade

sk110540: How to switch from 3rd party CA to Internal CA certificate for SSL clients connection

Re: Check Point Mobile

Daniel_Kavan — Wed, 25 Oct 2023 13:24:39 GMT

Do you want to DELETE the certificate from the Root store?

The warning is actually from CP, delete Subject: Check Point - CSHell., IL. Checkpoint, Check Point Moible

Issuer: Self Issued

Re: Check Point Mobile

G_W_Albrecht — Wed, 25 Oct 2023 14:44:50 GMT

I do not want to delete anything - your second post now makes me think i did not understand the question, so please disregard my answer !

Re: Check Point Mobile

Daniel_Kavan — Wed, 25 Oct 2023 15:24:56 GMT

TAC said it's expected and thru windows, and the fingerprint is random (doens't tie back to anything) and the sk is hidden (only CP can see it). I just asked the customer to say YES to both. This sk answers part of it while the other half is hidden. https://support.checkpoint.com/results/sk/sk122077