topic SDL enable for all user with GPO in SASE and Remote Access

SDL enable for all user with GPO

checkgsingh — Tue, 31 Aug 2021 06:59:55 GMT

Hello,

Is there a recognised way by Checkpoint to enable the SDL feature to all users local machine with a GPO to either replace files or push changes to the clients’ machines?

Cheers

Re: SDL enable for all user with GPO

PhoneBoy — Tue, 31 Aug 2021 07:52:07 GMT

This thread might be helpful: https://community.checkpoint.com/t5/Remote-Access-VPN/Checkpoint-Mobile-VPN-enable-SDL-programmatically/m-p/107367#M4450

Re: SDL enable for all user with GPO

checkgsingh — Wed, 01 Sep 2021 01:01:34 GMT

As we have staff members working on net and off net – We would like to have SDL enabled for all our users…

However, the GPO changes that have been mentioned in the link do not work and is not supported by Checkpoint.

Additionally, the screenshot shows that it should show the additional icon, however when using the GPO method and registry changes/add-ons described it does not give the option for users to connect prior to logon or not.

We are unable to push the repackaged MSI to the users as some users are on slow links.

Re: SDL enable for all user with GPO

PhoneBoy — Wed, 01 Sep 2021 02:27:19 GMT

This particular response to the thread suggests it can be enabled with a CLI command: https://community.checkpoint.com/t5/Remote-Access-VPN/Checkpoint-Mobile-VPN-enable-SDL-programmatically/m-p/113495/highlight/true#M4779
That plus the registry changes.

Re: SDL enable for all user with GPO

checkgsingh — Mon, 06 Sep 2021 02:49:51 GMT

Thanks! It worked.