topic Re: Minimum CP Mobile client version allowed to connect to firewall in SASE and Remote Access

Minimum CP Mobile client version allowed to connect to firewall

seanmc12 — Wed, 02 Nov 2022 20:11:20 GMT

Is there somewhere in the checkpoint firewall, that I can configure the version of the Check Point Mobile version allowed to connect to the CP gateway? I am getting ready to update my HA 6500s to R81 and want to make sure clients are upgraded to new version of CP Mobile and not allow the older version of the client. I opened a ticket and was told that that does not exist, but I specifically remember hearing something about that, but am unable to find a thing on it.

Thanks for any direction.

Re: Minimum CP Mobile client version allowed to connect to firewall

Chris_Atkinson — Thu, 03 Nov 2022 05:14:07 GMT

Are you thinking of this setting perhaps?

Otherwise I think you're probably getting into the Endpoint Compliance policies for registry / file checks.

Re: Minimum CP Mobile client version allowed to connect to firewall

seanmc12 — Thu, 03 Nov 2022 11:17:18 GMT

Not really. I thought there was a setting on the gateway that looked for a specific version of the end point client and it the connecting end point client was not the version specified, it prompted the connecting end client to initiate a download and upgraded of the connecting client. So, essentially, when I upgrade to R81, where do I go in the gateway to specify what version of the end point client the end users should be utilizing?

Re: Minimum CP Mobile client version allowed to connect to firewall

PhoneBoy — Thu, 03 Nov 2022 18:19:29 GMT

It's a combination of editing a file and enabling a setting in Global Properties.
Refer to: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk163354&partition=Advanced&product=Endpoint