topic Re: Mobile access agent windows 11 compatibility in SASE and Remote Access

Mobile access agent windows 11 compatibility

gcarella — Tue, 14 Jun 2022 12:20:13 GMT

Hi all,

anyone has any news about official support to Windows 11 for Mobile access portal agent (SNX)?

Yesterday I was forced to upgrade to Windows 11 and now all Checkpoint Mobile access VPNs are unable to connect.

Agent installation goes fine and I was prompted to accept certificates and trust server too.

Simply during "connecting..." phase the pop-up it's closed without any errors.

Current agent version is 800.007.042.

I'm using OpenJDK 17 for windows x64

Is there anyone that was able to get it working?

Thanks,

Gianluigi.

Re: Mobile access agent windows 11 compatibility

PhoneBoy — Tue, 14 Jun 2022 14:35:30 GMT

SNX is currently not supported with Windows 11.
The regular Check Point Mobile (installable with the Endpoint Security VPN package) will work.

Re: Mobile access agent windows 11 compatibility

Perry_McGrew — Mon, 27 Jun 2022 13:35:40 GMT

With W11 coming up being GA for a year, there is no official SK documenting CP's Windows 11 support for SNX or other products?

Re: Mobile access agent windows 11 compatibility

Chris_Atkinson — Wed, 29 Jun 2022 13:36:45 GMT

Please see: sk175323: Windows 11 Support Plan for Check Point Products

Re: Mobile access agent windows 11 compatibility

gcarella — Wed, 29 Jun 2022 12:22:58 GMT

Hi Chris,

your link refers to an sk not accessible.

"Sorry, this solution is deleted and can only be viewed by Check Point employees."

SSL Network Extender

See sk175324

Anyway I was able to get it to work SNX with Win11.

These were my steps.

remove all SNX agent, JDK and JAVA installed. (then reboot)
Install JAVA JRE8
Install OpenJDK 17 (microsoft build)
Install SNX agent
Try to connect. (it should work).
Reboot
remove JAVA JRE8 (not allowed for policy)
Try to connect. (it should work).

Re: Mobile access agent windows 11 compatibility

Srdjan_B — Thu, 06 Oct 2022 13:22:39 GMT

There seems to be partial conflict between sk175323 and sk175324

sk175323 says "SSL Network Extender: Supported, See sk175324"

However, sk175324 says that only Mobile Access Portal is supported, while all of below listed components "Will be added soon"

SSL Network Extender (SNX) Network Mode
SSL Network Extender (SNX) Application Mode
Endpoint Security On Demand (ESOD) Compliance Scanner
Endpoint Security On Demand Secure Workspace (SWS)

Do we know when will these four components be supported?

Thank you.

Re: Mobile access agent windows 11 compatibility

PhoneBoy — Fri, 07 Oct 2022 16:15:54 GMT

To fully answer this question, we also need to talk about the Deployment Agent, which is used to deploy SNX, ESOD, and SWS.
The Deployment Agent requires Java, and the version we support doesn't align with what Windows 11 uses.
Newer Java support is planned for Q4 2022.

As for the individual components:

SNX already works on Windows 11 as pointed out earlier in this thread
ESOD should work on Windows 11
Secure Workspace is known to not work on Windows 11

However, none of the above has been through a formal QA cycle.
I presume we will test SNX and ESOD support on Windows 11 when we are testing the updated Deployment Agent, thus we can expect to announce formal support during Q4 2022.

That leaves Secure Workspace, which currently doesn't work on Windows 11.
At this time, we cannot offer a timeline on when this might be supported and recommend you work with your local Check Point office on an RFE.

Re: Mobile access agent windows 11 compatibility

Juan_ — Mon, 12 Dec 2022 15:52:14 GMT

Hey,

When you say SNX agent you mean deployment agent or the separate network extender client?

Thanks
Juan

Re: Mobile access agent windows 11 compatibility

PhoneBoy — Wed, 14 Dec 2022 21:01:46 GMT

Java is only required for the deployment agent (necessary to invoke SNX).

Re: Mobile access agent windows 11 compatibility

Srdjan_B — Mon, 20 Mar 2023 08:30:50 GMT

Our customer is asking about formal support for SNX and ESOD. Any estimates when can we expect it?

Thank you

Re: Mobile access agent windows 11 compatibility

Chris_Atkinson — Mon, 20 Mar 2023 08:46:31 GMT

Check Point Mobile Access support for Windows 11 still documents this as "coming soon"

For an official statement and ETA you should discuss with your customers assigned CP SE.

Re: Mobile access agent windows 11 compatibility

_Val_ — Mon, 20 Mar 2023 08:57:14 GMT

sk175324 is available, actually. This is what it says:

This is the current state of Mobile Access support in Windows 11:

Note: For most up-to-date information, revisit this page.

	Internet Explorer 11	Microsoft Edge	Firefox	Chrome
Mobile Access Portal	Supported	Supported	Supported	Supported
SSL Network Extender (SNX) Network Mode	Will be added soon	Will be added soon	Will be added soon	Will be added soon
SSL Network Extender (SNX) Application Mode	Will be added soon	Will be added soon	Will be added soon	Will be added soon
Endpoint Security On Demand (ESOD) Compliance Scanner	Will be added soon	Will be added soon	Will be added soon	Will be added soon
Endpoint Security On Demand Secure Workspace (SWS)	Will be added soon	Will be added soon	Will be added soon	Will be added soon

Re: Mobile access agent windows 11 compatibility

Srdjan_B — Tue, 21 Mar 2023 13:22:45 GMT

Article was updated yesterday, so it is different now 😀

Also, since yesterday sk175323 and sk175324 are conflicting, looks like SK175323 needs to be updated.

SK175323 says SWS is "Supported See sk175324"

SK175324 says that SWS support is "Not planned"

Re: Mobile access agent windows 11 compatibility

PhoneBoy — Tue, 21 Mar 2023 18:11:51 GMT

I've put a note into the SK team to correct sk175323.
If you need support for SWS in Windows 11, I recommend reaching out to your local Check Point office to discuss an RFE.

Re: Mobile access agent windows 11 compatibility

_Val_ — Wed, 22 Mar 2023 07:49:18 GMT

SKs are now aligned.