VPN Site Endpoint

[Mattia_Marini]

Hi All,

is possible to add a VPN Site configured in a client installed by Initial Client using Smart Endpoint R80.30 ?

I know that this is possibile using an exported packages, but i cannot do it using initial client.

Thanks

[G_W_Albrecht]

What do you mean when using Smart Endpoint R80.30 ? There is Mobile Access Web Portal, Check Point Mobile for Windows, Endpoint Security VPN client and Endpoint Security Suite with an Endpoint Security Server (e.g. R80.30) and Endpoint Security clients (e.g. E81.20).

If using an Endpoint Security Server with Endpoint Security clients, install packages must always be defined and exported from the Endpoint Security Server !

The Endpoint Security VPN client can be installed as-is and a site can be defined for VPN.

For further information, see sk67820: Check Point RemoteAccessSolutions.

Al flavors of clients are available here: sk117536 - Endpoint Security Homepage.

[Mattia_Marini]

Yes, i've Endpoint Security Server with Endpoint Security clients .
I've defined a VPN Client Settings in the Advanced Package Settings on Deployment's Tab but if i install a client using only the initial clients the vpn site will no be configured automatically.

[Mattia_Marini]

[G_W_Albrecht]

You have exported the configured EPS client from EPSS successfully ? Otherwise, you can not do any further configuration.

[Mattia_Marini]

If i exported the configured EPS client (full packages) it works; but if i export only the initial client it download and install the packages but not configure the VPN Site

[G_W_Albrecht]

Did you follow Endpoint Security Management Server Administration Guide R80.20 p.47ff ? If the VPN Blade is configured in the Software Deployment rules for these  clients, rolling out the initial client for Automatic Deployment should be sufficient.

Of course, connection between EPSS and initial client must be working for successful deployment ! Looks like a TAC case to me...

[Norbert_Bohusch]

No, configuration is only in deployment package and the initial client is not related to such deployment package.

Unfortunately current the only way for initial clients is that after deployment with VPN client the site is created by a script using GPO or similar.

Would be great to add a feature to allow remote configuration of site after deployment!