Solved: Configuration for macOS

sjlo · ‎2021-01-06

Hi,

We're deploying the Endpoint VPN client to our Macs, and we want to predefine some settings.

1. Gateway, so users don't have to manually run the Site Wizard

2. Disable "Always Connect" as default.

I'm able to edit the trac.defaults file and change 'neo_always_connected' to 'false', but this ends up "locking" the settings in the GUI so the end users can't change the setting at a later time, or even configure VPN Tunneling.

As for setting a default gateway, I'm at at loss. the trac.defaults file has so many options I don't know where to start.

So, I guess my question is; Are there any documentation on how to configure the client on macOS? E.g. a document explaining the options in trac.default?

Thanks!

Regards

Sjur

PhoneBoy · ‎2022-12-15

VPN Configuration Utility for Windows: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
For macOS, see: https://sc1.checkpoint.com/documents/HarmonyEndpoint/Harmony_Endpoint_Security_for_macOS_MDM_Deploym...

View solution in original post

PhoneBoy · ‎2021-01-06

Some of these things need to be set on the gateway side (not client side).
Believe most/all of these also apply in trac.config as well: https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.SearchResultMainAction&eve...

sjlo · ‎2021-01-07

Thanks, I suspected that.

I can see the Site Wizard populates the Trac.config file with the gateway details. I was thinking just deploying the same Trac.config file, populated with only the site details, across all devices. Would that cause any issues?

According to our Checkpoint guy, the Always-Connect option is set to "Configured on endpoint client" on the gateway. I'm able to set it to 'true' and 'false' in Trac.defaults and it reflects in the VPN client options, but I'm not able to change the setting in the GUI (VPN Options -> Properties -> Settings), the options are greyed out.

shadows112 · ‎2022-12-15

Hi sjlo,

in these days i'm trying to do the same thing as yours, that is, add 2 site to vpn checkpoint client, i managed to get a trac.config file i want. Now how can I create a custom pkg that automatically inserts the 2 sites when it is installed?