Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
yeruel
Contributor

Unable to uncheck SSL Network Extender (SNX)

Dear Checkmates, 

Please kindly provide your usual support to disable SSL Network Extender(SNX) in web - ssl vpn with web browsers. We just want only portal URL, we don't need to SSL Network extender (SNX). To uncheck the SSL Network Extender in the Check Point Mobile Access web portal, navigate to the "Mobile Access" section in SmartConsole, then under "VPN Clients", locate the SSL Network Extender settings and simply uncheck the box enabling it; essentially disabling the option for users to access the network using the SSL Network Extender client through the Mobile Access portal. We are unable to uncheck the SSL Network Extender (SNX).

One of my customer wants to disable SSL Network Extender feature but still still want to have the remote access VPN solution.

Version Gaia R81.20

and Policy Source Unified Access Policy

SNX Uncheck1.png
SSL Portal URL1.png
VPN SSL SNX.PNG

0 Kudos
9 Replies
the_rock
Legend
Legend

I dont have access to my lab brother to test, but you are definitely on the right track. Are you able to uncheck "other" option?

Andy

0 Kudos
yeruel
Contributor

Andy,

I am able to check the top web -SSL VPN with the web browsers, but unable to uncheck the SSL network extender (SNX)

0 Kudos
the_rock
Legend
Legend

Try uncheck web in first screenshot, push policy, then try remove ssl option in 2nd screenshot.

Andy

0 Kudos
PhoneBoy
Admin
Admin

I suspect it's only possible to disable SNX when Mobile Access Blade is NOT used.
TAC may be required here.

0 Kudos
the_rock
Legend
Legend

That makes sense.

0 Kudos
Duane_Toler
Advisor

Select "General Properties" on the left, then on the right at the bottom in the list of products, uncheck Mobile Access Blade.  Now you can remove it from the list of VPN Clients.  You don't need Mobile Access Blade if you only want the VPN client (installed as "Endpoint Security VPN").  You still have access to Office Mode and everything, just not the SSL VPN portal.

0 Kudos
the_rock
Legend
Legend

Im also sure that would fix it. @yeruel Can you try that?

Andy

0 Kudos
yeruel
Contributor

But the users want to use portal url login to access like web applications.

0 Kudos
Duane_Toler
Advisor

Ah. Then you can't disable SNX and retain the portal.  That's part of the Mobile Access Blade.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events