Mobile access agent windows 11 compatibility

[gcarella]

Hi all,

anyone has any news about official support to Windows 11 for Mobile access portal agent (SNX)?

Yesterday I was forced to upgrade to Windows 11 and now all Checkpoint Mobile access VPNs are unable to connect.

Agent installation goes fine and I was prompted to accept certificates and trust server too.

Simply during "connecting..." phase the pop-up it's closed without any errors.

Current agent version is 800.007.042.

I'm using OpenJDK 17 for windows x64

Is there anyone that was able to get it working?

Thanks,

Gianluigi.

[PhoneBoy]

SNX is currently not supported with Windows 11.
The regular Check Point Mobile (installable with the Endpoint Security VPN package) will work. 

[Perry_McGrew]

With W11 coming up being GA for a year, there is no official SK documenting CP's Windows 11 support for SNX or other products?  

[Chris_Atkinson]

Please see: sk175323: Windows 11 Support Plan for Check Point Products

[gcarella]

Hi Chris,

your link refers to an sk not accessible.

"Sorry, this solution is deleted and can only be viewed by Check Point employees."

SSL Network Extender

See sk175324

Anyway I was able to get it to work SNX with Win11.

These were my steps.

1. remove all SNX agent, JDK and JAVA installed. (then reboot)
2. Install JAVA JRE8
3. Install OpenJDK 17 (microsoft build)
4. Install SNX agent
5. Try to connect. (it should work).
6. Reboot
7. remove JAVA JRE8 (not allowed for policy)
8. Try to connect. (it should work).

[Juan_]

Hey,

When you say SNX agent you mean deployment agent or the separate network extender client?


Thanks
Juan

[PhoneBoy]

Java is only required for the deployment agent (necessary to invoke SNX).

[_Val_ · Accepted solution]

sk175324 is available, actually. This is what it says:

This is the current state of Mobile Access support in Windows 11:

Note: For most up-to-date information, revisit this page.

	Internet Explorer 11	Microsoft Edge	Firefox	Chrome
Mobile Access Portal	Supported	Supported	Supported	Supported
SSL Network Extender (SNX) Network Mode	Will be added soon	Will be added soon	Will be added soon	Will be added soon
SSL Network Extender (SNX) Application Mode	Will be added soon	Will be added soon	Will be added soon	Will be added soon
Endpoint Security On Demand (ESOD) Compliance Scanner	Will be added soon	Will be added soon	Will be added soon	Will be added soon
Endpoint Security On Demand Secure Workspace (SWS)	Will be added soon	Will be added soon	Will be added soon	Will be added soon

[Srdjan_B]

Article was updated yesterday, so it is different now 😀

Also, since yesterday sk175323 and sk175324 are conflicting, looks like SK175323 needs to be updated.

SK175323 says SWS is "Supported See sk175324"

SK175324 says that SWS support is "Not planned"

[PhoneBoy]

I've put a note into the SK team to correct sk175323.
If you need support for SWS in Windows 11, I recommend reaching out to your local Check Point office to discuss an RFE.

[Srdjan_B]

There seems to be partial conflict between sk175323 and sk175324

sk175323 says "SSL Network Extender: Supported, See sk175324"

However, sk175324 says that only Mobile Access Portal is supported, while all of below listed components "Will be added soon"

SSL Network Extender (SNX) Network Mode
SSL Network Extender (SNX) Application Mode
Endpoint Security On Demand (ESOD) Compliance Scanner
Endpoint Security On Demand Secure Workspace (SWS)

Do we know when will these four components be supported?

Thank you.

[PhoneBoy]

To fully answer this question, we also need to talk about the Deployment Agent, which is used to deploy SNX, ESOD, and SWS.
The Deployment Agent requires Java, and the version we support doesn't align with what Windows 11 uses.
Newer Java support is planned for Q4 2022.

As for the individual components:

• SNX already works on Windows 11 as pointed out earlier in this thread
• ESOD should work on Windows 11
• Secure Workspace is known to not work on Windows 11

However, none of the above has been through a formal QA cycle.
I presume we will test SNX and ESOD support on Windows 11 when we are testing the updated Deployment Agent, thus we can expect to announce formal support during Q4 2022.

That leaves Secure Workspace, which currently doesn't work on Windows 11.
At this time, we cannot offer a timeline on when this might be supported and recommend you work with your local Check Point office on an RFE.

[Srdjan_B]

Our customer is asking about formal support for SNX and ESOD. Any estimates when can we expect it? 

Thank you 

[Chris_Atkinson]

Check Point Mobile Access support for Windows 11 still documents this as "coming soon"

For an official statement and ETA you should discuss with your customers assigned CP SE.

[_Val_]

SKs are now aligned.