Windows 10 Built-in VPN

Simon_Milhomme · ‎2018-05-08

Hi!

Has anyone tried and successfully established a remote access VPN from the Windows 10 built-in client. The client tries IKEv2 and should authenticate with a certificate.

I successfully used Capsule VPN with certificate authentication, it uses SSL.

Any advise?

XBensemhoun · ‎2018-05-09

Already and successfully done with Windows 8 but not through Windows 10.

Nobody tested that?

PhoneBoy · ‎2018-05-09

Doesn't Windows 10 have a PPTP client built in like earlier versions?

I assume it works similarly to past releases but I haven't tried it myself.

Simon_Milhomme · ‎2018-05-10

The Win10 Always-On VPN features a Device Tunnel which has to be IKEv2 and Certificate.

I see IKE packets hitting the gateway but nothing more. Any advise on how to troubleshoot that? Increase what kind of debug?

Thanks!

PhoneBoy · ‎2018-05-10

Start here: How to run complete VPN debug on Security Gateway to troubleshoot VPN issues?

I would also engage with our TAC as well: Contact Support | Check Point Software

Henning_Gunders · ‎2018-08-08

You can not use the "Windows 10 built-in client" directly.
You need to install the "CheckPoint Capsule VPN" client first, and use this as the VPN provider.

Here is the link from the Microsoft Store:
Get Check Point Capsule VPN - Microsoft Store

Warning: This client is outdated, so why not use the latest fully featured Endpoint VPN client instead?
Also: A license for Check Point Mobile is required on the Security Gateway. License count per concurrent connected devices

Louis_Poulin · ‎2019-03-07

Henning, why do you say that Capsule VPN is an outdated client?

Henning_Gunders · ‎2019-03-08

The Capsule VPN was released way back in 2014... Maybe that's why?
Also the latest release notes for Win10 is dated september 2015...
(At least the client for iPhone/iPads are getting updated...)

BUT, if you want to secure desktop Windows 10 clients, why not use the full feature set of the Check Point Endpoint VPN client?

Louis_Poulin · ‎2019-03-13

Thanks, but the Endpoint solution requires licenses and that is not an option for now. Hopefully in the near future!