4

On Windows I can connect to a VPN with the Check Point Endpoint Security client.

However, since my main desktop is Ubuntu 18.04 I found an alternative client (SNX) which worked until some weeks ago. (I previously also used it with Ubuntu 16.04 and CentOS 7.4).

Until then my recipe was:

  • download CheckPointVPN_SNX_Linux_800007075.sh from https://www.fc.up.pt/ci/servicos/acesso/vpn/vpn-cp-linux.html?&item=495 (for what I read and tested directly, build 800007075 is the only one that works)

  • chmod 777 CheckPointVPN_SNX_Linux_800007075.sh

  • sudo apt-get install libx11-6:i386 libstdc++5:i386 libpam0g:i386 (don't try to run the next step without this one: you will receive a fake "installed successful" message)

  • sudo sh CheckPointVPN_SNX_Linux_800007075.sh

  • snx -s x.x.x.x -c

That was working perfectly until 30/06/2018. At first I thought some Ubuntu update broke all the magic. (Btw, the Window 7 client was still working, so I couldn't blame the server.)

Then I tried to reload some old Ubuntu 16.04 and CentOS 7.4 images, where it was working, but received the same message:

SNX: Connection aborted.

The only explanation that I can think of is that, on the server side, they made some change that blocked SNX.

I tried with OpenVPN, OpenSSL, and IPsec, also trying to split the p12 cert to the 3 PEM certs required by these clients - no success.

Since I can connect to the VPN from a VirtualBox Windows 7 guest I also tried to "export" this VPN connection from guest to host (i.e. allow the host to connect to the VPN via the guest connection) but still no success.

Do you have any suggestions?

Improve this question
0

2 Answers 2

Reset to default
0

I have to use reauth for snx to work ok for me.

For that I use a .snxrc file in the homedir of the user invoking snxas in:

server 1.1.1.1
username xxxxxx
reauth yes

For more details see https://unix.stackexchange.com/questions/450229/getting-checkpoint-vpn-ssl-network-extender-working-in-command-line/453727

Improve this answer
-1

Newer versions of SNX are not working.

As stated in your question, the only working version I found that I am using on ubuntu 18.04 is 800007075 which can be gotten here: https://www.fc.up.pt/ci/servicos/acesso/vpn/vpn-cp-linux.html?&item=495

So to anyone intending to use checkpoint vpn on linux the above script still works on the latest Ubuntu version

Improve this answer
3
  • 2
    Hi Eric, it's not late, but this is exactly the first link that I pointed out..
    – Vincenzo Caselli
    Commented Oct 23, 2018 at 14:21
  • Exactly as written in the question.
    – freedev
    Commented Feb 22, 2019 at 14:30
  • @freedev ... I meant to note that newer versions of SNX are not working correctly...
    – Eric Kirima
    Commented Feb 25, 2019 at 6:32

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .