Deploy Checkpoint VPN with preconfigured sites on MACOS

[shadows112]

Hi all,

as the title suggests, I would like to deploy, using intune, checkpoint vpn with 2 preconfigured sites, so that the user doesn't have to enter them by hand. Is there any way to do this? Has anyone had experience with this before?

Thanks everyone for the replies.

[PhoneBoy]

I presume it works similar to how it does on Windows.
Namely you need to prepare a trac.config file with the relevant settings and include it in the installer package you distribute to your users.

And, in fact, we have a specific guide for integrating with Intune: https://sc1.checkpoint.com/documents/HarmonyEndpoint/Harmony_Endpoint_Security_for_macOS_MDM_Deploym...

[shadows112]

hi, first of all thanks for the reply. Excuse me but I'm totally new in this environment, could you tell me a little more about the steps?

[PhoneBoy]

At a high level, it’s something like:

• Unpack the .pkg file (believe its a zip file)
• Replace the trac.config file inside with one that has the desired settings
• Repack the zip file

I personally haven’t done it, though, so might be missing a step.
In any case, the TAC should be able to assist with this.

[shadows112]

I've tried to download the pkg from checkpoint site but if I try to unpack it there's no trac.config file inside, in the attachment i've upload the content of folder. Sorry but TAC stands for? 

[PhoneBoy]

Technical Assistance Center: https://help.checkpoint.com 

However, it looks like the process for preconfiguration on MacOS is a bit different than I remember it.
See: https://sc1.checkpoint.com/documents/HarmonyEndpoint/Harmony_Endpoint_Security_for_macOS_MDM_Deploym... 

[shadows112]

Ok I managed to create a trac.config containing the 2 sites, at this point how can I create a pkg that installs the vpn with this configuration file?