mobile access blade question

[Daniel_Kavan]

why do I have to install the Check Point Mobile Access Portal Agent when I am connecting via a Windows 11 laptop and not a mobile device?

I have a user who is asking why he doesn't need to install portal agent on his mobile phone to get to the portal.

Does any one have a link to what the mobile access portal agent vs deployment agent do?

[Chris_Atkinson]

Mobile Access is just the marketing name for SSL VPN.

There are multiple methods of access depending on the configuration, client vs portal etc.

[the_rock]

Component	Purpose / Function	When / Why It’s Needed
Mobile Access Portal Agent	This is a component used when you access the Check Point Mobile Access portal from a desktop/laptop browser to enable full access (for example, to use native apps via SSL VPN, access file shares, RDP, or other network-resources not purely web-based). It allows the portal to support non-web-only features by installing a helper agent. It also can help with “Network Mode” or “SSL Network Extender / SNX” type connectivity. (Checkpoint)	Mostly needed on desktops/laptops when the user needs more than just browser/web-access (e.g. when using web portal + native applications, resource share access, etc.). On mobile OS (iOS/Android), Check Point uses dedicated apps (Capsule Workspace, etc.) which already include needed capabilities, so the portal agent is not needed. (Checkpoint)
Deployment Agent	This is a service/agent (often running on domain-joined Windows endpoints) that allows remote deployment / pushing of Check Point Endpoint Security / VPN clients or other endpoint components. It helps administrators centrally manage installing or updating endpoint-side client-software via Active Directory domains. It typically is an initiator for remote install requests on target workstations in the same AD domain. (Checkpoint)	Used for endpoint management and ensuring devices are compliant / have the correct endpoint software installed / kept up to date. Not typically involved in the “end-user connecting via portal” day-to-day, unless new client components need to be pushed.