Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Ben_Murphy
Explorer

Dynamic Packages and VPNConfig Tool

 

Check Point recently (E82.50 & R80.40) introduced a new EndPoint feature called Dynamic Packages. Historically when you exported a Endpoint package from the EndPoint console you would create a 700meg MSI regardless of which blades you selected. In some situation this became a major hurdle for uptake of the product. Enter "Dynamic Packages" awesome we all thought, a package with just the VPN blade selected is now 55meg!!!..... but..... you can no longer use the VPNconfig tool to nicely package up a custom trac.default or trac.config configuration which is a major set-back as generally we provide a managed build preconfigured. 

We logged a case with the TAC (SR#6-0001964453) but received the following reply:

                   Please be aware there's no update regarding to some plan to add this Dynamic Package. So no official solution was provided, other than a suggestion to raise an RFE.

We investigated this further and came up with the below work around. 

1. Export the Dynamic package as you usually would. No requirement to specifically apply the trac.config at this stage as you can do it later in the process. 

2. Copy the executable to local location i.e. c:\install

3. Using 7-Zip open the executable and extract the contents to the local directory i.e. c:\install\package

4. Inside the c:\install\package directory you will find an eps.msi. You can now use the VPNconfig Tool to insert trac.default and trac.config. 

5. Now using 7-zip compress the contents of the c:\install\package into a 7z file. In our case we called it EPS_82_50_1602_Laptop_273.7z

6. Copy newly created z7 file to c:\install and also copy the file c:\install\package\sfxConfig.txt to c:\install (This sfxConfig.txt file is in the package you created in the Endpoint manager in step 1.) 

7. Obtain the file 7zSD.sfx from the 7-zip extras package. This can be obtained here https://www.7-zip.org/download.html  and then via link for "7-Zip Extra: 7z Library, SFXs for installers, Plugin for Fare Manager" 

8. The 7zSD.sfx will be found in the bin directory. Copy this file to c:\install

9. In c:\install you should now have 7zSD.sfx, sfxConfig.txt and EPS_82_50_1602_Laptop_273.7z

9.  Run the below command to create a self extracting executable called install.exe. 

            C:\install> copy /b 7zSD.sfx + sfxConfig.txt + EPS_82_50_1602_Laptop_273.7z install.exe
            7zSD.sfx
            sfxConfig.txt
            EPS_82_50_1602_Laptop_273.7z
                   1 file(s) copied.

10. Yay you now have an install.exe that is both a Dynamic package and includes your custom trac.default and trac.config.

3 Replies
PhoneBoy
Admin
Admin

Thanks for sharing that, seems like a reasonable workaround until we account for dynamic packages in the vpnconfig tool.
0 Kudos
dt7
Contributor

Hi,

Has there been an update to allow the customization of the dynamic package (for the trac. files) since this post? Or it is still the same situation and we have to use this workaround?

0 Kudos
PhoneBoy
Admin
Admin

Not that I’m aware of.
Suggest you bring this requirement through your local Check Point office.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events