Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Sanjay_S
Advisor

Mobile Access Blade - Checkpoint EndPoint Security

Jump to solution

Hi All,

We are migrating from VSX to Physical boxes. In this environment we are using the same existing policy by cloning it.

We have Mobile Access blade with Checkpoint endpoint Security enabled here. So after migration do we need to update any certificate or anything else that needs to be considered for Checkpoint Endpoint Certificate to work without any issues? All the IPs that are in the VSX platform will be configured as the VIP IPs in the migration to Physical box. So IPs will remain same for Endpoint to work. Just concerned about Certificate and any other parameters which should be checked. Please help.

Regards,

Sanjay S

0 Kudos
1 Solution

Accepted Solutions
Daniel_Collins
Collaborator

Yes, so that's the same client but called Check Point Mobile. Same applies, so if you're creating new gateway objects then you'll get a new certificate which will be presented to the users unless you're using a valid certificate for the device. 

There is sometimes a way to export the existing VPN certificate, but this has been challenging in the past. 

View solution in original post

0 Kudos
3 Replies
Daniel_Collins
Collaborator

Hi,

So MAB and Endpoint Sec are different things, and do have different portals. But if you are migrating between VSX and Physical hardware I'm almost certain you're going to have to create a new object in the SmartConsole for the gateway(s) which will mean a new certificate will need to be created. 

Your users will receive a "certificate warning" to say it's been changed, providing everything else is the same.

 

Daniel

0 Kudos
Sanjay_S
Advisor

Thank you Daniel.

I was talking about the Client based VPN which can be enabled in Mobile Access blade, the oprion is Endpoint Security VPN.

Regards,

Sanjay S

0 Kudos
Daniel_Collins
Collaborator

Yes, so that's the same client but called Check Point Mobile. Same applies, so if you're creating new gateway objects then you'll get a new certificate which will be presented to the users unless you're using a valid certificate for the device. 

There is sometimes a way to export the existing VPN certificate, but this has been challenging in the past. 

View solution in original post

0 Kudos