Uninstall Check Point Endpoint ??

[RemoteUser]

We’ve encountered situations where Check Point cannot be uninstalled properly (there is documentation related to this)???
Is there a reliable method to perform a full cleanup of any version and component of Check Point from a workstation, in order to ensure a clean environment before installing the latest version?

[the_rock]

windows or mac? barebone vpn client or harmony endpoint?

Andy

[RemoteUser]

ww 11 & vpn client

[G_W_Albrecht]

Why would you want to manually remove a client that will be updated automatically ? Also you can remove the client by a push operation from EPSS.

If you really need to do this, contact CP TAC so they will give you the correct procedure and the PassDialog.exe file... I know how this is done, and it is not really fun 😉 So what is the reason for this question ?

[RemoteUser]

Hi Albercht
there is a suspicion that the traditional uninstall procedure does not leave the machine clean.
The question is : is there a universal unistaller that can remove all checkpoint components on the machine ?
We provide a client vpn for a large number of employers...

[G_W_Albrecht]

No, there is no universal uninstaller from CP ! This RA client type install/uninstall completely relies on the Windows Installer in Control panel!

[the_rock]

If its just a barebone vpn client, that can always be removed from control panel, but the SKs @Tal_Paz-Fridman sent are totally valid, specially the 2nd one in your case.

Andy

[RemoteUser]

the 2nd one say:
When password prompt appears, enter the Endpoint Security Client uninstallation password
Which one??? We dont set any psw.... this is simply installer vpn .msi

[the_rock]

Thats applicable to harmony endpoint, NOT barebone vpn client.

Andy

[RemoteUser]

Exactly Andy, here we are only talking about VPN checkpoints. not Harmony 

[the_rock]

Right, so does it not work via control panel? What is the exact issue?

Andy

[G_W_Albrecht]

Then why did you write about full cleanup of any component of Check Point from a workstation when this is just the standAlone VPN client called Remote Access VPN Client ? Any component would be the EPS blades...

The uninstall process is first to shutdown the client from task bar menu and then uninstall from Settings Apps.

[RemoteUser]

The client thinks there is a suspicion that the traditional uninstall procedure does not leave the machine clean. so I ask if there is anything different from the standard procedure.

[G_W_Albrecht]

Unintstall leaves a clean machine - i am not 100% sure that the registry is cleaned from Remote Access VPN Client keys, but this will not matter at all. Can the client give any reason for his suspicion ? Never heard of that...

[the_rock]

@RemoteUser So when you say client does not think traditional process would not leave machine clean, are you saying they dont believe that would TOTALLY CLEAN it from any trace CP related?

Andy

[the_rock]

@RemoteUser If above is the case, then I would strongly recommend the TAC case to get the best option.

Andy

[RemoteUser]

Hi Andy,
The customer suppose , yes, but i don't know on what basis

[G_W_Albrecht]

Tell him you have the official  confirmation that it does clean all - and do not reveal where this confirmation is coming from 😉

[RemoteUser]

but if he ask me to send him the documentation 🤔😅

[G_W_Albrecht]

...ask him to send his documentation. This was a joke !  But you can open a SR# with CP TAC to get the official confirmation. If a customer does not believe in my professional opinion he should seek someone else to bother...

[RemoteUser]

i got it bro, thanks

[the_rock]

Just my personal opinion...customers have every right to ask for 2nd opinion. I would never take those things to heart (as they say). I always found it makes most clients more conmfortable when vendors' support tells them exact same thing that you did and thats totally fine. As long as its all in writting, you are good.

Andy

[G_W_Albrecht]

You wrote: We’ve encountered situations... So you did not say that this is pure customer suspicion !

[G_W_Albrecht]

I do not find anything relevant for the case in question - 2nd one relates to FDE, so i do not understand how these should help here !

[Tal_Paz-Fridman]

There are several SKs related to uninstall of Endpoint Security Client - it depends on the issue you've encountered:

https://support.checkpoint.com/results/sk/sk176205

https://support.checkpoint.com/results/sk/sk103727

https://support.checkpoint.com/results/sk/sk170444

https://support.checkpoint.com/results/sk/sk183103

[G_W_Albrecht]

All 4 SKs listed above are about EPS client, not the StandAlone RA VPN client RemoteUser  is talking about...

‎