SDL enable for all user with GPO

[checkgsingh]

Hello,

Is there a recognised way by Checkpoint to enable the SDL feature to all users local machine with a GPO to either replace files or push changes to the clients’ machines?

Cheers

[PhoneBoy]

This thread might be helpful: https://community.checkpoint.com/t5/Remote-Access-VPN/Checkpoint-Mobile-VPN-enable-SDL-programmatica...

[checkgsingh]

As we have staff members working on net and off net – We would like to have SDL enabled for all our users…

However, the GPO changes that have been mentioned in the link do not work and is not supported by Checkpoint.

Additionally, the screenshot shows that it should show the additional icon, however when using the GPO method and registry changes/add-ons described it does not give the option for users to connect prior to logon or not.

We are unable to push the repackaged MSI to the users as some users are on slow links.

[PhoneBoy · Accepted solution]

This particular response to the thread suggests it can be enabled with a CLI command: https://community.checkpoint.com/t5/Remote-Access-VPN/Checkpoint-Mobile-VPN-enable-SDL-programmatica... 
That plus the registry changes.

[checkgsingh]

Thanks! It worked.