CheckPointVPN.msi install string

[NeilDavey]

Afternoon

I am looking at installing E86.50_CheckPointVPN.msi and want to do this via SCCM.

On a manual install, I would select the 2nd option (Check Point Mobile).

I can't seem to find an install string to do this silently.

I found this post from 2018:

Changing the Standalone Remote Access Client flavo... - Check Point CheckMates

But I am not keen on this method as it doesn't seem to be supported by Check Point.

Is there a silent install string that can be used now?

Thanks

[G_W_Albrecht]

See sk179668: Installing Harmony Endpoint with MSI through CLI

My post was about changing an installed client from e.g. with firewall to no firewall.

[NeilDavey]

Thanks for this however, I am not sure how to define the install as "Check Point Mobile"

When I do an manual install and select it like this, the reg key is:

Looking at the link for Harmony, I have put together an install like this:

msiexec.exe /i C:\Source\E86.50_CheckPointVPN.msi /quiet

The install is silent and installs but the reg key is different from the manual install:

Am I missing something on how to select the Check Point Mobile on this silent install?

[G_W_Albrecht]

Sorry - sk179668 is only for EPS, you are using Check Point Remote Access VPN Clients for Windows. Afaik there is no CLI install string available for these, so you have to set the reg key to use Check Point Mobile. See https://sc1.checkpoint.com/documents/RemoteAccessClients_forWindows_AdminGuide/Content/Topics-RA-VPN...

[NeilDavey]

Thank you.

So no issues with doing the install as standard and then having the reg key as EndpointSecurity and then changing this to Mobile?

If this is the only way, then I will get this packaged up with SCCM

[G_W_Albrecht]

That should be OK. The selection page only does set the reg key to the flavour choosen,the  installation files are always the same. On startup the RA client reads the set flavour.