checkpoint VPN .pkg macOS intune deployment

[RalfsF]

I was wondering has anybody deployed E86.20 Endpoint Security VPN Clients for macOS from intune?

The problem that I face is as follows:

First I tried to deploy this app as .dmg file, but it failed, the reason probably because in the .dmg file, that checkpoint provides, there are 2 apps (VPN and FW) so that did not work.

Second I got the .pgk file and tried to deploy it with macOS line-of-business app in intune. This failed with an error The app state is unknown (0x87D13B67). 
As far as I searched I have an idea what is the problem, as per microsofts documentation (https://learn.microsoft.com/en-us/troubleshoot/mem/intune/app-management/macos-lob-apps-not-deployed) macOS line-of-business app .pkg info file  needs 2 things CFBundleShortVersionString which the cp vpn .pkg file has and install-location="/Applications", cp vpn .pkg has the install-location value but it points to install-location="/" not install-location="/Applications" so in my opinion that may be the problem.

So I was wondering dose any one have experienced this problem and maybe some tips or workarounds to get this deployment working.

[_Val_]

Did you walk through the MDM deployment guide already? https://downloads.checkpoint.com/dc/download.htm?ID=112208

[Georgi_]

Hello, I try to install VPN client with Intune and have the same problem.  The link for guide dosn`t work. Do i need another access to  see the link? 

[PhoneBoy]

I assume this is another dead link as a result of the support site being updated.
Try: https://sc1.checkpoint.com/documents/HarmonyEndpoint/Harmony_Endpoint_Security_for_macOS_MDM_Deploym...

[Chris_Atkinson]

E86.30 specifically introduced inTune support as I recall e.g.

Intune MDM: a popular Microsoft MDM. Its support entails the tiny agent, which can generate a special script that should be uploaded to Intune.

Are you following a guide to attempt the deployment?

[Georgi_]

Hello, when i try to open tthis link https://downloads.checkpoint.com/dc/download.htm?ID=112208 to guide, show me message "File not found". Do you possible to send me link which one is work ?

[the_rock]

I think that link is broken, cant open it either.

[LazarusG]

Hi

From the CP_Endpoint_Security_for_macOS_MDM_Deployment_Guide.pdf it suggests that that EPS_TINY.zip needs to be exported from a web or on-prem management server. If the customer doesn't have this infrastructure, and is only trying to install the Endpoint Security agent for remote access VPN via Intune; Am I correct in assuming they must use option 3 on pg 8 i.e. cpConfigTool? If so, may I ask where is this located? As I cant find in my endpoint server lab/windows installation directory/Support site. Is it something included in the MAC endpoint installation directory (Im afraid I dont have one to check).

Thanks

[PhoneBoy]

I believe the cpConfigTool is only for full Harmony Endpoint deployments, not for Endpoint Security VPN.
For that, you would deploy a custom DMG/PKG file.
See:

https://sc1.checkpoint.com/documents/HarmonyEndpoint/Harmony_Endpoint_Security_for_macOS_MDM_Deploym...

[LazarusG]

Thank you Phoneboy.

For future reference re full Harmony Endpoint Deployments, do you know where the cpConifTool can be found?

I cant find its equivalent in windows Harmony Endpoint/on-prem or cloud.

[PhoneBoy]

The documentation says it's "EA status" which means it's not on SupportCenter.
@BarYassure any idea when this tool will be released?

[Georgi_]

Where then can find the guide how to install Check Point VPN client for mac devices by Intune. And replace config file. Do you somebody make it ?