3

Is there an official/third party command line client for the checkpoint vpn for Linux?

It seems that there are a few GUI options, but I can't find a client for a headless machine.

gparyani
  • 1,845
  • 9
  • 30
  • 48
Malt
  • 461
  • 1
  • 3
  • 9
  • 2
    The serverfault question you point to states that Checkpoint vpn is actually a Cisco vpn, and that vpnc should work with it. If so, this man page http://linux.die.net/man/8/vpnc will be helpful to you. – MariusMatutiae Oct 01 '15 at 17:28

1 Answers1

6

SSL VPN - Check Point's client

The only Check Point's currently supported VPN client for Linux is SSL Network Extender (SNX). As of 2019-07-15 it officially supports these Linux distributions (sk65210):

  • Ubuntu 14.04, 16.04, 16.10, 17.04
  • openSUSE 11.4, 12.2
  • Fedora 15, 16, 18
  • RHEL 6.1, 7.3, 7.4

SNX has a CLI (command snx) and according to the knowledge base article sk65484 it does not need X11, just some X11 libraries. SNX needs a Mobile Access Software Blade license to work.

IPsec VPN - 3rd party clients

Check Point also supports IPsec VPN and L2TP for client to site VPNs. There are multiple 3rd party VPN clients which are able to work with the Check Point Security Gateway. You can use for example one from the SWAN family (FreeS/WAN, Openswan, strongSwan, Libreswan).

See also sk67820 - Check Point Remote Access Solutions.

pabouk - Ukraine stay strong
  • 6,568
  • 5
  • 40
  • 52
  • 1
    CheckPoint supports indeed IPsec, however a big *if*, it as to be configured by the FW admin. see https://unix.stackexchange.com/questions/450131/vpn-ssl-network-extender-in-firefox/709258 and https://github.com/ruyrybeyro/chrootvpn – Rui F Ribeiro Nov 06 '22 at 11:11