SCV Checks for macOS Endpoint Computers

[Spartanec]

Hi, colleagues!
I'm testing SCV Checks for macOS and trying to create a custom filter for Macs.
The link below provides three examples but I don't fully understand the syntax. For example, is it possible to create a check based on a hostname mask or the presence of a corporate certificate?
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_RemoteAccessVPN_AdminGuide/Topics-...

[ShemHunter]

Hi Spartanec,

I found this post, it's probably very old, and perhaps @PhoneBoy will confirm this statement:

https://community.checkpoint.com/t5/Remote-Access-VPN/Host-Check-for-RAVPN/m-p/194157

"Endpoint Compliance is what you will need to use on the Mac.
This requires Harmony Endpoint licenses that include Remote Access or a CPEP-ACCESS SKU."

[Spartanec]

Hi, ShemHunter !
Thanks but it's old information. Now SCV works on MacOs too.

[ShemHunter]

https://support.checkpoint.com/results/sk/sk182226 - I found this article.

But also, if you need to verify the certificate, I would suggest using send the certificate to the device itself:

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_RemoteAccessVPN_AdminGuide/Topics-...

[the_rock]

It does work, but I recall someone else on here trying it, but would not work as intended. Might be worth TAC case.