Endpoint Security VPN, remotely create site

[Sergo89]

Hello,

do we have any way how to push a new VPN Site address to Endpoint Security clients (create it)? i know we can play with MSI file and trac.defaults, but endpoint client deployed on 500 computers already (we began from Endpoint and gateway should be next step).

Advanced Package settings in SmartEndpoint looks like change MSI file also.

And do we have any feature in SmartEndpoint for VPNs, because its part of client....

please advise.

thanks

[G_W_Albrecht]

I can not see if you talk about EPS VPN clients or full EPS Suite clients.

[Sergo89]

G_W_Albrecht, i guess its Suite

[Yatiraj_Panchal]

Hi,

I think there is no way to do it in Check Point from SmartConsole.

But, u can do it from remotely managed devices tools (Like: LanDesk)

Below the alternatives:

1. Just do it manually on one device which is admin device of that tool and then push to all the other devices which managed by that tool.

2: You can do it from Windows CMD as well few lines command is there (will share you in next post), but you have to run on each machine. 

2nd one is little bit tough for you, but you can create SOP share with users

Thank You

Yatiraj

[Sergo89]

Thank you Yatiraj, i thought about that, looks like i have to replace conf files remotely... just one way

[ISA_License_Adm]

Hi,

Was the post shared on how remotely create a site via CMD?

[alancw]

Id be definitely interested in hearing a solution for this one, as I have the same issue at the moment.

Also does anyone know if its possible to define two sites in the packages for export from the R80.30 smartendpoint server, so that users have the option to connect into either site say if one was down?

[_Val_]

Not two sites. You are looking for a single site in MEP configuration. It is well documented, actually. 

[alancw]

No problem, is there any way of pushing out a second site to users? We have 500+ users, it would be some pain to have to manually add a second site to all the user machines.

[_Val_]

Basically, in any Remote Access Admin Guide. Here is an example: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_RemoteAccessVPN_AdminGuide/h...

[MikeB]

Did anyone find a solution or alternative to this? Thanks in advance.

[_Val_]

Did you read the comments?

[MikeB]

Of course I did, including yours. The link you share shows "Not Found" message inside the Admin Guide and even though I'm looking, I couldn't find the example you mention.
On the other hand, I found a slightly more manageable alternative for changing or creating a VPN site that could be done remotely with the "Update Configuration Tool":

E80.72 and higher Remote Access Clients for Windows Administration Guide - http://downloads.checkpoint.com/dc/download.htm?ID=60345

I think Check Point could improve this feature to be able to do it directly from the SmartEndpoint or SmartConsole.

[_Val_]

Apologies then.

The link I was posting should go to the "Configuring MEP" section of the doc. It is not working for me either, sorry about that.


Since the original question was about adding a secondary site, MEP is the best option. Config tool is to create MSI packages. This is indeed the way, but you need to push them around. Depending on the actual needs and desired, either way could work.