Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
gcarella
Participant
Jump to solution

Mobile access agent windows 11 compatibility

Hi all,

anyone has any news about official support to Windows 11 for Mobile access portal agent (SNX)?

Yesterday I was forced to upgrade to Windows 11 and now all Checkpoint Mobile access VPNs are unable to connect.

Agent installation goes fine and I was prompted to accept certificates and trust server too.

Simply during "connecting..." phase the pop-up it's closed without any errors.

 

Current agent version is 800.007.042.

I'm using OpenJDK 17 for windows x64

 

Is there anyone that was able to get it working?

 

Thanks,

Gianluigi.

0 Kudos
1 Solution

Accepted Solutions
_Val_
Admin
Admin

sk175324 is available, actually. This is what it says:

This is the current state of Mobile Access support in Windows 11:

Note: For most up-to-date information, revisit this page.

  Internet Explorer 11 Microsoft Edge Firefox Chrome
Mobile Access Portal Supported Supported Supported Supported
SSL Network Extender (SNX) Network Mode Will be added soon Will be added soon Will be added soon Will be added soon
SSL Network Extender (SNX) Application Mode Will be added soon Will be added soon Will be added soon Will be added soon
Endpoint Security On Demand (ESOD) Compliance Scanner Will be added soon Will be added soon Will be added soon Will be added soon
Endpoint Security On Demand Secure Workspace (SWS) Will be added soon Will be added soon Will be added soon Will be added soon

 

 

View solution in original post

0 Kudos
14 Replies
PhoneBoy
Admin
Admin

SNX is currently not supported with Windows 11.
The regular Check Point Mobile (installable with the Endpoint Security VPN package) will work. 

0 Kudos
Perry_McGrew
Contributor

With W11 coming up being GA for a year, there is no official SK documenting CP's Windows 11 support for SNX or other products?  

0 Kudos
Chris_Atkinson
Employee Employee
Employee
0 Kudos
gcarella
Participant

Hi Chris,

your link refers to an sk not accessible.

"Sorry, this solution is deleted and can only be viewed by Check Point employees."

SSL Network Extender See sk175324

 

Anyway I was able to get it to work SNX with Win11.

These were my steps.

  1. remove all SNX agent, JDK and JAVA installed. (then reboot)
  2. Install JAVA JRE8
  3. Install OpenJDK 17 (microsoft build)
  4. Install SNX agent
  5. Try to connect. (it should work).
  6. Reboot
  7. remove JAVA JRE8 (not allowed for policy)
  8. Try to connect. (it should work).

 

Juan_
Collaborator

Hey,

When you say SNX agent you mean deployment agent or the separate network extender client?


Thanks
Juan

0 Kudos
PhoneBoy
Admin
Admin

Java is only required for the deployment agent (necessary to invoke SNX).

0 Kudos
_Val_
Admin
Admin

sk175324 is available, actually. This is what it says:

This is the current state of Mobile Access support in Windows 11:

Note: For most up-to-date information, revisit this page.

  Internet Explorer 11 Microsoft Edge Firefox Chrome
Mobile Access Portal Supported Supported Supported Supported
SSL Network Extender (SNX) Network Mode Will be added soon Will be added soon Will be added soon Will be added soon
SSL Network Extender (SNX) Application Mode Will be added soon Will be added soon Will be added soon Will be added soon
Endpoint Security On Demand (ESOD) Compliance Scanner Will be added soon Will be added soon Will be added soon Will be added soon
Endpoint Security On Demand Secure Workspace (SWS) Will be added soon Will be added soon Will be added soon Will be added soon

 

 

0 Kudos
Srdjan_B
Collaborator

Article was updated yesterday, so it is different now 😀

Also, since yesterday sk175323 and sk175324 are conflicting, looks like SK175323 needs to be updated.

SK175323 says SWS is "Supported See sk175324"

SK175324 says that SWS support is "Not planned"

0 Kudos
PhoneBoy
Admin
Admin

I've put a note into the SK team to correct sk175323.
If you need support for SWS in Windows 11, I recommend reaching out to your local Check Point office to discuss an RFE.

0 Kudos
Srdjan_B
Collaborator

There seems to be partial conflict between sk175323 and sk175324

sk175323 says "SSL Network Extender: Supported, See sk175324"

However, sk175324 says that only Mobile Access Portal is supported, while all of below listed components "Will be added soon"

SSL Network Extender (SNX) Network Mode
SSL Network Extender (SNX) Application Mode
Endpoint Security On Demand (ESOD) Compliance Scanner
Endpoint Security On Demand Secure Workspace (SWS)

Do we know when will these four components be supported?

Thank you.

0 Kudos
PhoneBoy
Admin
Admin

To fully answer this question, we also need to talk about the Deployment Agent, which is used to deploy SNX, ESOD, and SWS.
The Deployment Agent requires Java, and the version we support doesn't align with what Windows 11 uses.
Newer Java support is planned for Q4 2022.

As for the individual components:

However, none of the above has been through a formal QA cycle.
I presume we will test SNX and ESOD support on Windows 11 when we are testing the updated Deployment Agent, thus we can expect to announce formal support during Q4 2022.

That leaves Secure Workspace, which currently doesn't work on Windows 11.
At this time, we cannot offer a timeline on when this might be supported and recommend you work with your local Check Point office on an RFE.

0 Kudos
Srdjan_B
Collaborator

Our customer is asking about formal support for SNX and ESOD. Any estimates when can we expect it? 

Thank you 

0 Kudos
Chris_Atkinson
Employee Employee
Employee

Check Point Mobile Access support for Windows 11 still documents this as "coming soon"

For an official statement and ETA you should discuss with your customers assigned CP SE.

CCSM R77/R80/ELITE
_Val_
Admin
Admin

SKs are now aligned.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events