checkpoint mobile access vpn in linux centos

[Pantsu]

hello 
i want to install checkpoint mobile access vpn client in linux (centos) machine, how  can  i do it ? 
 

[mdjmcnally]

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

Should be what need to do then browse and should download / install the SSL Network Extender.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

Confirms what Browsers work and what Patch Level need to be at on the Gateway

[Pantsu]

thankyou , i understand it but, i have linux server without graphical interface. and how can i do it in this linux server. ?

[mdjmcnally]

Short answer is you won't.   The Thin Client is Browser based so would be needing the GUI.

Is there a reason that a Server needs a Client-Server VPN.    I believe that a Site to Site VPN that only permits the access to the Server would be more practical.

[BigAnt]

(Unofficial) open-source analog can work without graphical interface. However IPSec-based solutions is better suited for unattended use cases.

[PhoneBoy]

If you can't use SNX but have an R80.30 gateway, you can try one or more of the following:

https://community.checkpoint.com/t5/Remote-Access-Solutions/C2S-L2TP-over-IPSEC-Linux-VPN-with-R80-3...
https://community.checkpoint.com/t5/Remote-Access-Solutions/C2S-Libreswan-3-23-Roadwarrior-and-R80-3...
https://community.checkpoint.com/t5/Remote-Access-Solutions/C2S-strongSwan-Roadwarrior-and-R80-30-wo...

Note that I don't believe any of the above instructions will work with releases prior to R80.30.

[Harshpal_Bhati]

L2TP can be an option here but afaik L2TP will tunnel whole traffic .

[Harshpal_Bhati]

Also to add One of my large customer has replaced TMG proxy with SNX they use SNX to route internet traffic from servers as they do not have public routing enable in backbone . In some cases Linux server and Windows server dont have browser and even no option to define proxy to get them internet access . I am exploring some workarond for same my test is still in progress ..

Let me know if any one have better idea