Removing Desktop policy

[ascoyne]

We currently have a Desktop policy enabled on our Check Point VPN endpoints.  We know how to manage the Desktop policy and how to allow end-users the ability to temporarily disable the policy, but how do we remove the desktop policy so it is no longer applied to endpoints?  We do not want a local Check Point Firewall on our endpoints, but we still want the ability to use VPN.

[the_rock]

Make sure its removed from policy layer, then uncheck it from gateway (cluster) properties. If you have any issues, happy to do remote.

Andy

  

[ascoyne]

Thank you @the_rock - you are a superstar.

[the_rock]

Glad we can help. Did that work?

Andy

[ascoyne]

I will be applying the change next week.  I will update you.

[the_rock]

No worries! Message me if any issues.

Andy

[ascoyne]

Hi @the_rock, I have applied the change and VPN still works.  I was expecting the VPN client to show Firewall disabled, but it doesn't.  However it does show Security Policy disabled, so perhaps I'm overthinking it.  

Is this expected?  And does it mean the local Check Point is still on?

[the_rock]

Make sure there is no reference of it in legacy dashboard and also, as a test, I would try delete/re-create the site and see the status when you connect.

Andy

[ascoyne · Accepted solution]

@the_rock you are a superstar!  I have deleted the site and re-added and the Firewall policy is now Not Configured.  

[the_rock]

Ah, its nothing my friend...put it this way. My life mentality was always something like this...no matter where you go or who you help, we are all different, some people may know more than others, some people less, BUT, if we do things TOGETHER, there is nothing that cant be achieved. I had seen it myself all over the world, so I try to inspire others to try do the same.

Anyway, did not mean to sound "cheesy" : - )

Glad it worked for you.

Andy