topic Re: remote access vpn embedded browser how to clear cache in SASE and Remote Access

remote access vpn embedded browser how to clear cache

nflnetwork29 — Thu, 11 May 2023 18:29:50 GMT

When using the Check Point VPN client W/ Identify provider (Azure / SAML) - By default, the Windows client uses its embedded browser.

I am having a quirky issue where the Edge browser is using cached/saved credentials (save username) to connect.

I see nowhere to clear this and enter a different username other than what is cached.

Has anyone come across this?

Re: remote access vpn embedded browser how to clear cache

the_rock — Thu, 11 May 2023 18:36:51 GMT

Maybe this?

Re: remote access vpn embedded browser how to clear cache

nflnetwork29 — Thu, 11 May 2023 18:41:37 GMT

no dice.

is there any way to force the browser to open in "incognito" mode?

Re: remote access vpn embedded browser how to clear cache

the_rock — Thu, 11 May 2023 18:47:08 GMT

https://www.groovypost.com/howto/make-microsoft-edge-always-start-in-inprivate-mode/

Re: remote access vpn embedded browser how to clear cache

PhoneBoy — Thu, 11 May 2023 20:04:53 GMT

In E87.30 and above, we support using the default browser for the client OS for SAML authentication.
See: https://support.checkpoint.com/results/sk/sk180395

Re: remote access vpn embedded browser how to clear cache

nflnetwork29 — Thu, 11 May 2023 19:57:22 GMT

yeah, i saw that however it gives me no option to enter a username and password.

it signs me in automatically with my email id .

(I am testing another vpn setup for a different environment) so i have a conflict. If i could clear the cache somehow or force it to prompt for credentials i think it would work.

Re: remote access vpn embedded browser how to clear cache

the_rock — Thu, 11 May 2023 19:56:14 GMT

Are you saying that even in incognite mode makes no difference?

Andy

Re: remote access vpn embedded browser how to clear cache

PhoneBoy — Thu, 11 May 2023 20:06:43 GMT

If you're actually using this option, it would show not in the "embedded browser" but in the default browser configured in the OS.
There, you should be able to clear the necessary cookies.

Not sure how to clear cookies in the Embedded browser.

Re: remote access vpn embedded browser how to clear cache

AndreiR — Fri, 12 May 2023 12:59:22 GMT

Hi,

There is no option in VPN client to clear cookies in the Embedded Browser. But taking into account that Embedded Browser is based on Internet Explorer, you may try run IE and clear its cookies.

For the future, it is better to default system browser.

Re: remote access vpn embedded browser how to clear cache

nflnetwork29 — Fri, 12 May 2023 13:16:10 GMT

this link is not working for me

Re: remote access vpn embedded browser how to clear cache

PhoneBoy — Fri, 12 May 2023 18:28:27 GMT

@AndreiR can you confirm with the SK team that SK180395 can now be made public?
The TL;DR of it is to change idp_browser_mode in trac.defaults from embedded to default_browser.
trac.defaults can be found on the client in:

64-bit Windows: %ProgramFiles(x86)%\CheckPoint\Endpoint Connect\trac.defaults
macOS: /Library/Application Support/Checkpoint/Endpoint Security/Endpoint Connect/Trac.defaults

The Endpoint service will then need to be restarted as follows:

Windows (as admin)
- net stop TracSrvWrapper
- net start TracSrvWrapper
macOS:
- sudo launchctl stop com.checkpoint.epc.service
- sudo launchctl start com.checkpoint.epc.service

Re: remote access vpn embedded browser how to clear cache

AndreiR — Sat, 13 May 2023 09:18:48 GMT

Hi @PhoneBoy ,

Thanks for this hint. I've submitted update to sk180395. It will be published soon.