3rd party or OpenVPN client and Check Point RA

[Shahar_Grober]

Hi, Is there a way to connect using OpenVPN client to Check Point Gateway RA VPN If so, is there any documentation about it? If not, How can a Linux computer connect to Check Point Gateways via RA VPN?

[G_W_Albrecht]

You can find all the information here: sk67820: Check Point Remote Access Solutions

[Shahar_Grober]

I am talking about 3rd party client, is there a way to do so?

[PhoneBoy]

Only type of third party clients that used to work were L2TP over IPSEC.
I haven't done it recently, though.

[G_W_Albrecht]

Yes, i do know what you are talking about - as there is not supported 3rd party client, i have answered part two of your question : If not, How can a Linux computer connect to Check Point Gateways via RA VPN? 

---> this is answered here...

[PhoneBoy]

We need to fix your username again 😬
OpenVPN is not supported as a VPN client.
Theoretically you can use L2TP over IPsec clients but I haven't done this recently.

[Matthias_Haas]

many years ago, I used FreeS/WAN in RoadWarrior mode to connect to a checkpoint gateway like a SecuRemote User

It was configured more or less like this:

http://www.fw-1.de/aerasec/ng/vpn-freeswan/CP-FW1-NG+Linux-FreeSWAN-RoadWarrior.html

of course, it´s a bit outdated, not supported, may not work with R80.x etc, etc. 🙂
So, nothing I would use/recommend for a productive environment

[AK2]

Is it correct to say Check Point does not support any 3rd party VPN client connecting via IPSEC or TLS to a Check Point gateway?

E.g. OpenVPN, Native Android VPN, Windows 10 Always on VPN?

So the above are in the "might work with Check Point today, but might not work with Check Point tomorrow" basket?

And, therefore, an up-to-date VPN client provided by Check Point would be the recommended solution?

Thanks

[PhoneBoy]

The only third party VPN client we officially support is StrongSWAN, and only from R81 onward.
See: https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_RemoteAccessVPN_AdminGuide/T... 
Beyond that, we only support our own clients.