CheckPoint Mobile for Windows Compliance

[Antonio_Martins]

Hi

I have R80.10 with mobile and IPsec blades active and I need to ensure that only compliant clients can connect. A compliant client is one that has AV running with updated DAT and Windows critical updates installed. ESoD on mobile portal is not an option because it doesn't work well with all the browser protections. I was thinking on use CP Mobile for Windows client but I don't know how I can enforce compliance check. I've already enabled desktop policy and I have a green Compliant button on the client, but the gateway is not scanning the client...

Thanks Mates

AM

[PhoneBoy]

This is really an Endpoint‌ question, so moving it there.

The "Mobile" version of the VPN client does not include compliancy checks.

Compliance is a feature of the full Endpoint client, which require a different license than Mobile Access Blade.

[Antonio_Martins]

Thanks Dameon. It's strange why they have the compliance menu in there...

cheers

[PhoneBoy]

It's possible the client may support it, but you still have to have a license (the full Endpoint one) for that feature.

[Frandinata_Hali]

PhoneBoy, I also have same understanding before, until I found it on sk67820 it said "Security Verification for Endpoint Devices" is Yes. Is that different compliance?