Mobile Access Blade - Checkpoint EndPoint Security

[Sanjay_S]

Hi All,

We are migrating from VSX to Physical boxes. In this environment we are using the same existing policy by cloning it.

We have Mobile Access blade with Checkpoint endpoint Security enabled here. So after migration do we need to update any certificate or anything else that needs to be considered for Checkpoint Endpoint Certificate to work without any issues? All the IPs that are in the VSX platform will be configured as the VIP IPs in the migration to Physical box. So IPs will remain same for Endpoint to work. Just concerned about Certificate and any other parameters which should be checked. Please help.

Regards,

Sanjay S

[Daniel_Collins]

Hi,

So MAB and Endpoint Sec are different things, and do have different portals. But if you are migrating between VSX and Physical hardware I'm almost certain you're going to have to create a new object in the SmartConsole for the gateway(s) which will mean a new certificate will need to be created. 

Your users will receive a "certificate warning" to say it's been changed, providing everything else is the same.

Daniel

[Sanjay_S]

Thank you Daniel.

I was talking about the Client based VPN which can be enabled in Mobile Access blade, the oprion is Endpoint Security VPN.

Regards,

Sanjay S

[Daniel_Collins · Accepted solution]

Yes, so that's the same client but called Check Point Mobile. Same applies, so if you're creating new gateway objects then you'll get a new certificate which will be presented to the users unless you're using a valid certificate for the device. 

There is sometimes a way to export the existing VPN certificate, but this has been challenging in the past.