topic Installing SNX in SASE and Remote Access

Installing SNX

monteparnas — Fri, 09 Oct 2020 22:32:25 GMT

I need the build 7075 of SNX, but the source my company gave sometimes installs the build 8084, I don't know why. We are trying to install it on a Linux machine. Is there any way to get the exact build needed without relying on our own unreliable IT management?

Re: Installing SNX

PhoneBoy — Sat, 10 Oct 2020 01:38:21 GMT

You probably want the specific build that enables CLI support for SNX on Linux, which can be downloaded from here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk90240
However, it should be noted this only works against a gateway that does not have Mobile Access Blade enabled.
If a gateway has Mobile Access Blade enabled, this will not work and will require an RFE.
R81 gateways will support StrongSWAN as an option from Linux clients.

Re: Installing SNX

monteparnas — Tue, 13 Oct 2020 23:37:08 GMT

It didn't worked.

We were following instructions sent by the company, I don't really know a lot about this.

By using the command snx -v I get the following:

Check Point's Linux SNX
build 800007075

And stuff unrelated to this question.

This is on my computer, where the SNX is running without any problems. But on his machine, after following the exact same procedures, he gets this:

Check Point's Linux SNX
build 800008084

The instructions the company gave us say that the "build should be 7075 otherwise it won't work", and indeed my colleague's snx isn't working.

So I need to know how to get precisely this result, or at least understand what is happening.

Re: Installing SNX

PhoneBoy — Wed, 14 Oct 2020 05:18:50 GMT

You may need to contact the TAC to get the proper uninstall procedure.

Re: Installing SNX

G_W_Albrecht — Wed, 14 Oct 2020 09:18:09 GMT

In fact, this is a binary, /usr/bin/snx. During installation, snx_uninstall.sh is put into /usr/bin/ for uninstall. Further reference is made to /etc/snx and /etc/snx/tmp, i assume for configuration...