SNX is not showing

[LM-Rafael]

Hi,

I have a user who wants to connect via VPN using Linux.

I have already read the article.
https://community.checkpoint.com/t5/Security-Gateways/VPN-client-for-Linux/m-p/118830#M16828
Is there anything more up-to-date here? I thought it would be best if the user used Linux's own VPN client. That should work, right?

SNX is not displayed when I log in with the user in the web interface. What is the reason for this?

VPN IP pool: 192.168.101.0/24
Customer network: 192.168.100.0/24
VPN client: ???
Split tunneling: Should be deactivated

What do I have to do to make this work? I have already tested a few things and all without success.

Please send me corresponding instructions or articles, links.

Best regards

Rafael

[PhoneBoy]

SNX generally requires Mobile Access Blade to be deployed to end users.
The web interface you speak of for SNX requires Internet Explorer and Java Plugins (all of which are deprecated) and must be deployed via Mobile Access Blade.

If you want a "roll your own client" situation, use StrongSWAN, which we support since R81: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_RemoteAccessVPN_AdminGuide/C... 

[LM-Rafael]

Hi,

I have seen these instructions several times and they don't fit me at all.

Neither the config files nor folders exist.

I will continue to work on the VPN topic here 😅.

Thanks 

Rafael

[Lesley]

SNX + Linux is supported as stated in: https://support.checkpoint.com/results/sk/sk166032

38. Linux VPN client - it is supported?

Check Point supports SNX for Linux operating systems.  Support for Linux strongSwan Linux client is part of a recent development as documented in sk165014. Contact your local Check Point office for further information.

Here you can find the required software and supported platforms:

https://support.checkpoint.com/results/sk/sk119772

Here the SNX admin guide that you can use as a reference:

https://sc1.checkpoint.com/documents/SSL_Network_Extender_AdminGuide/Content/Search.htm?q=linux

Here some SK's you can use for troubleshooting:

https://support.checkpoint.com/results/sk/sk153032

https://support.checkpoint.com/results/sk/sk180837

https://support.checkpoint.com/results/sk/sk108184

https://support.checkpoint.com/results/sk/sk180750

[PhoneBoy]

Is it supported on Linux? Yes.
However, without Mobile Access Blade on the gateway there is no supported way to invoke SNX on Linux.
See: https://support.checkpoint.com/results/sk/sk180750

Which leaves StrongSWAN or a L2TP over IPsec client as the only options.