Checkpoint VPN Linux Client

Question

Is there a Linux client for Checkpoint VPN? Preferably for Ubuntu?

Itai Ganot · Answer 1 · 2014-11-20T08:43:26.887

16

I'm using SNX (by checkpoint) and it works perfect. It can be downloaded from here.

I used this guide in order to install snx on my client, check it out and see if you got all the required packages installed.

In addition, you can create a .snxrc file in your /home/user/ directory and include there the server's IP and username like so:

server          1.1.1.1
username        itaig

Then just run snx, you'll be asked to input your password and that's it.

edited Nov 20 '14 at 08:43

answered Jun 02 '13 at 10:02

Itai Ganot

10,644
29
93
146

2

I just get "SNX: Authentication failed" after I supply the certificate's password. Do I have to authenticate with the Windows client once before it will work, or something? – Robin Green Aug 11 '14 at 17:58
@RobinGreen, I've updated my answer, check it out. – Itai Ganot Aug 11 '14 at 18:06
Any idea how SNX would handle 2 factor authentication? I can't seem to get it to work. – Rob Audenaerde Aug 23 '16 at 07:36
It's complicated to configure and I haven't done it myself but I know it's doable – Itai Ganot Aug 23 '16 at 09:20
It is no longer supported on linux if ou disable RC4 and 3DES on the firewall :( – Rob Audenaerde Jul 12 '17 at 13:03

score 11 · Accepted Answer · answered Dec 02 '09 at 18:31

11

I've heard good things about Shrew, but I've only ever seen it used on Windows.

http://shrew.net/home

answered Dec 02 '09 at 18:31

baumgart

2,483
18
17

score 6 · Answer 3 · answered Feb 12 '10 at 09:58

The existing client is ancient, and as for now AFAIK, there are no plans to write a newer one. There are Linux native VPN clients that should work with checkpoint - check out vpnc and raccoon especially.

http://www.vpnc.org/InteropProfiles/checkpoint-profile.pdf
http://www.fw-1.de/aerasec/ng/vpn-racoon/CP-VPN1-NG-Linux-racoon.html

score 3 · Answer 4 · edited Apr 13 '17 at 12:14

3

I have successfully connected to Checkpoint (NGX R75) using Shrew Soft, more info here: https://serverfault.com/a/386021/73387

edited Apr 13 '17 at 12:14

Community

1

answered May 04 '12 at 10:16

Paul Fenney

226
2
5

score 2 · Answer 5 · answered Jul 23 '10 at 16:41

2

I'm assuming your looking for an IPSEC client, but if you are looking for SSL VPN, I have had good luck with the Checkpoint SNX client in Ubuntu.

http://www.checkpoint.com/products/ssl_network_ext/

answered Jul 23 '10 at 16:41

JakeRobinson

2,904
18
26

1

Unfortunately this now redirects to their mobile blade site. – frankster Nov 14 '12 at 16:19
And no longer works with modern ciphers – Rob Audenaerde Jul 12 '17 at 13:05

Dr I · Answer 6 · 2010-01-07T11:16:36.577

I also was looking for it AND I've found a checkpoint client VPN on the Checkpoint Users Forums, I'll link it to you tomorrow.

OK Here is the link to the Documentation under RedHat:

http://www.google.com/url?q=http://www.checkpoint.com/techsupport/downloads/html/securemote/sr-5-0/SecureClient_NG_build_53328.pdf&ei=48FFS7vqK5Sw4Qacls3_Ag&sa=X&oi=nshc&resnum=1&ct=result&cd=1&ved=0CAwQzgQoAA&usg=AFQjCNGgVXRHVJM7alNik11aQoO_7zYxog

BUT, the Linux client VPN seems to be deprecated and no longer supported, as my own experience, it should be better to use the OpenSwan VPN to connect throught an Checkpoint VPN gateway under linux.

Link is broken by now as well... – Maarten Bodewes May 31 '21 at 14:31 — Maarten Bodewes, May 31 '21 at 14:31

Rui F Ribeiro · Answer 7 · 2022-12-20T18:01:40.607

IPSEC pure clients only work if the firewall admin has configured the functionality. In a corporate setting, usually they dont, as Windows and Macs have specific client software.

From 2021 onwards, SNX on the command line is unfortunately not supported anymore.

You can connect via the mobile web portal upon installing SNX and the Java agent.

Or use my automatic setup script https://github.com/ruyrybeyro/chrootvpn

See https://unix.stackexchange.com/questions/450131/vpn-ssl-network-extender-in-firefox/709258 too, for more details.

Checkpoint VPN Linux Client

7 Answers7