Endpoint compliance check for Endpoint Connect clients.

[Blason_R]

Hi there,

I wanted to enable basic compliance/posture check for Remote Access VPN clients connecting to my firewall. These clients are Office mode users and not SNX.

I guess and per my understanding, I don't need to have any licenses since I already have purchased 50 user Endpoint VPN/office mode licenses. So, by enabling "Scan Endpoint for spyware and compliance" in Global properties -> Remote Access -> Endpoint Connect and defining policies should suffice my need.

Or do I need to activate any other settings to make these settings enforce for the users? 

Or ESOD is only available for SNX?

Please confirm.

TIA

Blason R

[PhoneBoy]

You mean you're doing exactly what's here?
https://community.checkpoint.com/t5/Remote-Access-Solutions/Endpoint-security-On-Demand/td-p/19494
Might be worth a TAC case.