Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Sergo89
Contributor

Endpoint Security VPN, remotely create site

Hello,

do we have any way how to push a new VPN Site address to Endpoint Security clients (create it)? i know we can play with MSI file and trac.defaults, but endpoint client deployed on 500 computers already (we began from Endpoint and gateway should be next step).

Advanced Package settings in SmartEndpoint looks like change MSI file also.

And do we have any feature in SmartEndpoint for VPNs, because its part of client....

please advise.

thanks

0 Kudos
Reply
13 Replies
G_W_Albrecht
Champion
Champion

I can not see if you talk about EPS VPN clients or full EPS Suite clients.

0 Kudos
Reply
Sergo89
Contributor

G_W_Albrecht, i guess its Suite

0 Kudos
Reply
Yatiraj_Panchal
Contributor

Hi,

I think there is no way to do it in Check Point from SmartConsole.

But, u can do it from remotely managed devices tools (Like: LanDesk)

Below the alternatives:

1. Just do it manually on one device which is admin device of that tool and then push to all the other devices which managed by that tool.

2: You can do it from Windows CMD as well few lines command is there (will share you in next post), but you have to run on each machine. 

2nd one is little bit tough for you, but you can create SOP share with users

Thank You

Yatiraj

0 Kudos
Reply
Sergo89
Contributor

Thank you Yatiraj, i thought about that, looks like i have to replace conf files remotely... just one way

0 Kudos
Reply
ISA_License_Adm
Explorer

Hi,

 

Was the post shared on how remotely create a site via CMD?

0 Kudos
Reply
alancw
Explorer

Id be definitely interested in hearing a solution for this one, as I have the same issue at the moment.

Also does anyone know if its possible to define two sites in the packages for export from the R80.30 smartendpoint server, so that users have the option to connect into either site say if one was down?

 

_Val_
Admin
Admin

Not two sites. You are looking for a single site in MEP configuration. It is well documented, actually. 

0 Kudos
Reply
alancw
Explorer

No problem, is there any way of pushing out a second site to users? We have 500+ users, it would be some pain to have to manually add a second site to all the user machines.

0 Kudos
Reply
_Val_
Admin
Admin

0 Kudos
Reply
MikeB
Advisor

Did anyone find a solution or alternative to this? Thanks in advance.
0 Kudos
Reply
_Val_
Admin
Admin

Did you read the comments?

0 Kudos
Reply
MikeB
Advisor

Of course I did, including yours. The link you share shows "Not Found" message inside the Admin Guide and even though I'm looking, I couldn't find the example you mention.
On the other hand, I found a slightly more manageable alternative for changing or creating a VPN site that could be done remotely with the "Update Configuration Tool":

E80.72 and higher Remote Access Clients for Windows Administration Guide - http://downloads.checkpoint.com/dc/download.htm?ID=60345

I think Check Point could improve this feature to be able to do it directly from the SmartEndpoint or SmartConsole.
0 Kudos
Reply
_Val_
Admin
Admin

Apologies then.

The link I was posting should go to the "Configuring MEP" section of the doc. It is not working for me either, sorry about that.
Screenshot 2020-07-06 at 10.49.34.png

Since the original question was about adding a secondary site, MEP is the best option. Config tool is to create MSI packages. This is indeed the way, but you need to push them around. Depending on the actual needs and desired, either way could work.