topic Re: checkpoint VPN .pkg macOS intune deployment in SASE and Remote Access

checkpoint VPN .pkg macOS intune deployment

RalfsF — Thu, 09 Feb 2023 11:17:07 GMT

I was wondering has anybody deployed E86.20 Endpoint Security VPN Clients for macOS from intune?

The problem that I face is as follows:

First I tried to deploy this app as .dmg file, but it failed, the reason probably because in the .dmg file, that checkpoint provides, there are 2 apps (VPN and FW) so that did not work.

Second I got the .pgk file and tried to deploy it with macOS line-of-business app in intune. This failed with an error The app state is unknown (0x87D13B67).
As far as I searched I have an idea what is the problem, as per microsofts documentation (https://learn.microsoft.com/en-us/troubleshoot/mem/intune/app-management/macos-lob-apps-not-deployed) macOS line-of-business app .pkg info file needs 2 things CFBundleShortVersionString which the cp vpn .pkg file has and install-location="/Applications", cp vpn .pkg has the install-location value but it points to install-location="/" not install-location="/Applications" so in my opinion that may be the problem.

So I was wondering dose any one have experienced this problem and maybe some tips or workarounds to get this deployment working.

Re: checkpoint VPN .pkg macOS intune deployment

_Val_ — Thu, 09 Feb 2023 12:57:32 GMT

Did you walk through the MDM deployment guide already? https://downloads.checkpoint.com/dc/download.htm?ID=112208

Re: checkpoint VPN .pkg macOS intune deployment

Chris_Atkinson — Thu, 09 Feb 2023 13:04:51 GMT

E86.30 specifically introduced inTune support as I recall e.g.

Intune MDM: a popular Microsoft MDM. Its support entails the tiny agent, which can generate a special script that should be uploaded to Intune.

Are you following a guide to attempt the deployment?

Re: checkpoint VPN .pkg macOS intune deployment

Georgi_ — Wed, 03 May 2023 20:29:18 GMT

Hello, I try to install VPN client with Intune and have the same problem. The link for guide dosn`t work. Do i need another access to see the link?

Re: checkpoint VPN .pkg macOS intune deployment

Georgi_ — Thu, 04 May 2023 13:38:22 GMT

Hello, when i try to open tthis link https://downloads.checkpoint.com/dc/download.htm?ID=112208 to guide, show me message "File not found". Do you possible to send me link which one is work ?

Re: checkpoint VPN .pkg macOS intune deployment

the_rock — Thu, 04 May 2023 13:54:55 GMT

I think that link is broken, cant open it either.

Re: checkpoint VPN .pkg macOS intune deployment

PhoneBoy — Thu, 04 May 2023 19:28:15 GMT

I assume this is another dead link as a result of the support site being updated.
Try: https://sc1.checkpoint.com/documents/HarmonyEndpoint/Harmony_Endpoint_Security_for_macOS_MDM_Deployment_Guide/Content/Front-Matter/Front-Matter-How-to-Search-in-this-Book.htm?tocpath=_____1

Re: checkpoint VPN .pkg macOS intune deployment

LazarusG — Wed, 07 Jun 2023 13:52:55 GMT

From the CP_Endpoint_Security_for_macOS_MDM_Deployment_Guide.pdf it suggests that that EPS_TINY.zip needs to be exported from a web or on-prem management server. If the customer doesn't have this infrastructure, and is only trying to install the Endpoint Security agent for remote access VPN via Intune; Am I correct in assuming they must use option 3 on pg 8 i.e. cpConfigTool? If so, may I ask where is this located? As I cant find in my endpoint server lab/windows installation directory/Support site. Is it something included in the MAC endpoint installation directory (Im afraid I dont have one to check).

Thanks

Re: checkpoint VPN .pkg macOS intune deployment

PhoneBoy — Wed, 07 Jun 2023 16:16:25 GMT

I believe the cpConfigTool is only for full Harmony Endpoint deployments, not for Endpoint Security VPN.
For that, you would deploy a custom DMG/PKG file.
See:

https://sc1.checkpoint.com/documents/HarmonyEndpoint/Harmony_Endpoint_Security_for_macOS_MDM_Deployment_Guide/Content/Topics-EP_Security_for_macOS_MDM_DG/MDM_Custom_pkg.htm?tocpath=Device%20Management%20Deployments%7C_____3

Re: checkpoint VPN .pkg macOS intune deployment

LazarusG — Thu, 08 Jun 2023 12:03:53 GMT

Thank you Phoneboy.

For future reference re full Harmony Endpoint Deployments, do you know where the cpConifTool can be found?

I cant find its equivalent in windows Harmony Endpoint/on-prem or cloud.

Re: checkpoint VPN .pkg macOS intune deployment

PhoneBoy — Thu, 08 Jun 2023 21:42:13 GMT

The documentation says it's "EA status" which means it's not on SupportCenter.
@BarYassure any idea when this tool will be released?

Re: checkpoint VPN .pkg macOS intune deployment

Georgi_ — Wed, 09 Aug 2023 13:56:06 GMT

Where then can find the guide how to install Check Point VPN client for mac devices by Intune. And replace config file. Do you somebody make it ?