When Endpoint Security Client is installed two inbound rules are created in Windows Defender firewall with advanced security. These two rules are :
- Check Point Endpoint Security VPN Service
- Check Point Endpoint Security VPN GUI
These rules allow any inboud traffic for TracSrvWrapper.exe and TrGUI.exe for all profiles (Domain, private and public).
On my test machine, I've disabled both rules and VPN still works as expected.
So what these rules are for ?