topic Endpoint Security VPN Not working on Big Sur in SASE and Remote Access

Endpoint Security VPN Not working on Big Sur

driftking9987 — Tue, 17 Nov 2020 10:10:15 GMT

Hi Everyone,

Am trying to connect to VPN through Endpoint security but am getting error.

Currently am on Big SUR OS ( 11.0.1 ) .

Also, when trying to install `snx_install_osx.sh` through `sudo sh ./snx_install_osx.sh` , it gives me `

The operation couldn’t be completed. (kmutil.KMError error 10.)` error.

Any help is highly appreciated.

Re: Endpoint Security VPN Not working on Big Sur

_Val_ — Tue, 17 Nov 2020 10:48:20 GMT

Big Sur is not yet supported. We expect EPS clients to support it in about a couple of month. There is a private Early Availability in progress for EPS on Big Sur. You will have to reach out to your local Check Point representatives to get onboard.

Anyhow, your client is too old, even for most of supported OSX versions.

Re: Endpoint Security VPN Not working on Big Sur

driftking9987 — Tue, 17 Nov 2020 12:01:30 GMT

I will try to reach out to the local rep guys. In the meanwhile, when am trying to connect to the VPN via native application option, it's stuck on `initializing` mode, I tried installing the `snx_install_osx.sh` but it errors out. What's the easiest way I can connect to the VPN?

I have Java 10 installed on my system.

java version "10.0.2" 2018-07-17

Java(TM) SE Runtime Environment 18.3 (build 10.0.2+13)

Java HotSpot(TM) 64-Bit Server VM 18.3 (build 10.0.2+13, mixed mode)

Re: Endpoint Security VPN Not working on Big Sur

PhoneBoy — Thu, 19 Nov 2020 17:17:10 GMT

We just released an EA version of the clients that support Big Sur.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170513

This probably doesn't include SNX.

Re: Endpoint Security VPN Not working on Big Sur

Chris_Butler — Mon, 19 Jul 2021 17:29:11 GMT

An word on whether SNX is supported on Big Sur?

I have two new hires starting today with brand newish macbook pros running OSX 11.3.x and 11.4.x

Re: Endpoint Security VPN Not working on Big Sur

RamGuy239 — Tue, 20 Jul 2021 09:25:00 GMT

If you didn't know. The client with support for macOS Big Sur was released in GA back in April:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170513

It will also support Mac's running on Apple M1, but you will need to have the Rosetta2 emulation running.

Re: Endpoint Security VPN Not working on Big Sur

Chris_Butler — Wed, 21 Jul 2021 16:08:26 GMT

Thanks for the reply!

I was asking about the SSL Network Extender, specifically, although, after reaching out to TAC, It seems that I might be forced to use the Endpoint VPN client instead of the clientless SNX solution we already have deployed and paid for.

I am about to look into implementing that right now actually, if our SNX licenses will cover using the endpoint solution.

Re: Endpoint Security VPN Not working on Big Sur

PhoneBoy — Wed, 21 Jul 2021 22:29:15 GMT

The VPN client on the Mac currently requires a Harmony Endpoint/SBA, CPEP-ACCESS, or a legacy SecureClient license.
It is not currently covered by Mobile Access license.
I would bring the requirement up with your local Check Point office.

Re: Endpoint Security VPN Not working on Big Sur

Chris_Butler — Wed, 21 Jul 2021 22:32:50 GMT

Thanks,

We currently have Check Point Enterprise Endpoint Security for our internal LAN PCs, (Managed from our Smart 1-410 box which manages both the security (gateway) and Endpoint) the licenses include the VPN client.

If we have a spare seat or two, I would assume I could use one of those?

Re: Endpoint Security VPN Not working on Big Sur

PhoneBoy — Wed, 21 Jul 2021 22:37:17 GMT

Yes, that should work.
May still be worth engaging the local office around this requirement in any case.