topic Re: Distribute Remote Access Client from the gateway in SASE and Remote Access

Distribute Remote Access Client from the gateway

Richard_Wieser — Thu, 21 Jan 2021 23:07:11 GMT

Is there a location on the gateway(s) where one can upload a customized Remote Access Client msi so that a user can download via a browser? Not looking to do an automatic upgrade. This would be for 3rd parties that we don't have access to push software to. We currently serve it up on a separate server and send a link. I would rather one location. https://mobileaccess.domaim.com/CheckPointVPN.msi or something similar.

Thanks

Re: Distribute Remote Access Client from the gateway

PhoneBoy — Fri, 22 Jan 2021 00:40:35 GMT

I guess you can try putting the file in $CVPNDIR/htdocs and see if it can be download this way (through mobileaccess.yourgateway.com/sslvpn/vpn.msi or whatever).
However, that's not supported and is unlikely to survive any sort of an upgrade.

Re: Distribute Remote Access Client from the gateway

Richard_Wieser — Fri, 22 Jan 2021 00:44:02 GMT

Thanks, tried with a text file and it was a no go. "Error: Access denied. The destination of your request has not been configured, or you do not have authorization to access it. (403)"

Re: Distribute Remote Access Client from the gateway

ggiordano — Thu, 09 Jun 2022 09:35:28 GMT

from REMOTE ACCESS CLIENTS FOR WINDOWS guide (pag. 35)

Distributing the Remote Access Clients From the Gateway
Use this procedure to distribute an upgrade of the Remote Access Clients from the Security Gateway.
To distribute the Remote Access Clients from the Security Gateway:
1. On the Security Gateway, in the $FWDIR/conf/extender/CSHELL directory, back up the
TRAC.cab and trac_ver.txt files.
2. Download the Remote Access Clients Automatic Upgrade file for your release from the Endpoint
Security home page.
3. Put the new TRAC.cab and ver.ini files in the same directory on the Security Gateway:
$FWDIR/conf/extender/CSHELL
4. On a non-Windows Security Gateway, run: chmod 750 TRAC.cab
5. Edit the trac_ver.txt file in the directory and change the version number to the number in the new
ver.ini.
6. Make sure the client upgrade mode is set:
Setting Up Remote Access clients
Remote Access clients for Windows Administration Guide | 36
a. Connect with SmartConsole to the Management Server.
b. Open Global Properties > Remote Access > Endpoint Connect.
c. Set the Client upgrade mode to Ask user (to let user confirm upgrade) or Always upgrade
(automatic upgrade).
d. Click OK.
7. Install the policy.
When the client connects to the Security Gateway, the user is prompted for an automatic upgrade of
the newer version.