Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Sergo89
Collaborator

Endpoint Security VPN, remotely create site

Hello,

do we have any way how to push a new VPN Site address to Endpoint Security clients (create it)? i know we can play with MSI file and trac.defaults, but endpoint client deployed on 500 computers already (we began from Endpoint and gateway should be next step).

Advanced Package settings in SmartEndpoint looks like change MSI file also.

And do we have any feature in SmartEndpoint for VPNs, because its part of client....

please advise.

thanks

0 Kudos
13 Replies
G_W_Albrecht
Legend
Legend

I can not see if you talk about EPS VPN clients or full EPS Suite clients.

CCSE CCTE CCSM SMB Specialist
0 Kudos
Sergo89
Collaborator

G_W_Albrecht, i guess its Suite

0 Kudos
Yatiraj_Panchal
Contributor

Hi,

I think there is no way to do it in Check Point from SmartConsole.

But, u can do it from remotely managed devices tools (Like: LanDesk)

Below the alternatives:

1. Just do it manually on one device which is admin device of that tool and then push to all the other devices which managed by that tool.

2: You can do it from Windows CMD as well few lines command is there (will share you in next post), but you have to run on each machine. 

2nd one is little bit tough for you, but you can create SOP share with users

Thank You

Yatiraj

0 Kudos
Sergo89
Collaborator

Thank you Yatiraj, i thought about that, looks like i have to replace conf files remotely... just one way

0 Kudos
ISA_License_Adm
Explorer

Hi,

 

Was the post shared on how remotely create a site via CMD?

0 Kudos
alancw
Participant

Id be definitely interested in hearing a solution for this one, as I have the same issue at the moment.

Also does anyone know if its possible to define two sites in the packages for export from the R80.30 smartendpoint server, so that users have the option to connect into either site say if one was down?

 

_Val_
Admin
Admin

Not two sites. You are looking for a single site in MEP configuration. It is well documented, actually. 

0 Kudos
alancw
Participant

No problem, is there any way of pushing out a second site to users? We have 500+ users, it would be some pain to have to manually add a second site to all the user machines.

0 Kudos
_Val_
Admin
Admin

0 Kudos
MikeB
Advisor

Did anyone find a solution or alternative to this? Thanks in advance.
0 Kudos
_Val_
Admin
Admin

Did you read the comments?

0 Kudos
MikeB
Advisor

Of course I did, including yours. The link you share shows "Not Found" message inside the Admin Guide and even though I'm looking, I couldn't find the example you mention.
On the other hand, I found a slightly more manageable alternative for changing or creating a VPN site that could be done remotely with the "Update Configuration Tool":

E80.72 and higher Remote Access Clients for Windows Administration Guide - http://downloads.checkpoint.com/dc/download.htm?ID=60345

I think Check Point could improve this feature to be able to do it directly from the SmartEndpoint or SmartConsole.
0 Kudos
_Val_
Admin
Admin

Apologies then.

The link I was posting should go to the "Configuring MEP" section of the doc. It is not working for me either, sorry about that.
Screenshot 2020-07-06 at 10.49.34.png

Since the original question was about adding a secondary site, MEP is the best option. Config tool is to create MSI packages. This is indeed the way, but you need to push them around. Depending on the actual needs and desired, either way could work.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events