topic Re: Endpoint Security VPN Client | Disable option in SASE and Remote Access

Endpoint Security VPN Client | Disable option

Oryx — Tue, 08 Feb 2022 09:53:05 GMT

Hi Checkmates community,

Anyone knows if it is possible to disable some options on the Endpoint Security VPN Client? For example, I would like to disable the option BC Authentication in the Endpoint Security VPN, so that the end user cannot change that option. Is that possible? Anyone knows if I can play with this on the GuiDBEdit or something like that?

Any help on this, it would be great.

Regards

Re: Endpoint Security VPN Client | Disable option

HeikoAnkenbrand — Tue, 08 Feb 2022 12:13:51 GMT

Hi @Oryx,

Maybe you can configure it in the following file on the gateway (Remote Access TTM Configuration )
$FWDIR/conf/trac_client_1.ttm

Re: Endpoint Security VPN Client | Disable option

Oryx — Tue, 08 Feb 2022 14:21:51 GMT

Hi @HeikoAnkenbrand

Thanks for your input. I completely forgot the .ttm file.

However, for this particular case, I was not able to find the right solution after reading the SK or the Advanced Guide for the Remote Access VPN.

The main concern of my end customer is the possibility that the end user has to Enroll or Renew the Certificate on the Endpoint Security VPN Client.

Our goal would be to disable this option for the end user.

Regards

Re: Endpoint Security VPN Client | Disable option

G_W_Albrecht — Tue, 08 Feb 2022 16:43:15 GMT

Why should the user do needless Renew (Enroll is impossible) ? Maybe rather use Enterprise Endpoint Security Windows Client for ATM

Re: Endpoint Security VPN Client | Disable option

Oryx — Wed, 09 Feb 2022 09:23:50 GMT

Hi @G_W_Albrecht

You're absolutely right. The end users should not use those options. The problem is that they can. If they press the button Renew, they will break their VPN conection. So, we would like to avoid that, since if the VPN connection breaks it will add more load work to the IT team.

Regards

Re: Endpoint Security VPN Client | Disable option

G_W_Albrecht — Wed, 09 Feb 2022 09:33:04 GMT

If you have end users that tamper with the RA VPN client settings better break their fingers first 😉! Such people would loose their job in seconds...

But you can completely disable the GUI using Enterprise Endpoint Security Windows Client for ATM

Re: Endpoint Security VPN Client | Disable option

Oryx — Wed, 09 Feb 2022 09:36:18 GMT

Hi @G_W_Albrecht,

Thanks for your help. I will try out the Endpoint Client for ATM and play around to check if it is feasible for us to use that.

Once again, many thanks for your help.